/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r5, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r6 = socket(0xa, 0x80001, 0x37)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(0xffffffffffffffff, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = dup2(r7, r8)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

15:20:49 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r5, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r6 = socket(0xa, 0x80001, 0x37)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(0xffffffffffffffff, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = dup2(r7, r8)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

15:20:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r5, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r6 = socket(0xa, 0x80001, 0x37)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(0xffffffffffffffff, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = dup2(r7, r8)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

[ 1905.845742] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:20:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r5, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r6 = socket(0xa, 0x80001, 0x37)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(0xffffffffffffffff, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = dup2(r7, r8)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(0x0, 0x10000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

15:20:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:50 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r5, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r6 = socket(0xa, 0x80001, 0x37)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(0xffffffffffffffff, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = dup2(r7, r8)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(0x0, 0x10000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

15:20:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r5, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r6 = socket(0xa, 0x80001, 0x37)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(0xffffffffffffffff, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = dup2(r7, r8)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

15:20:50 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:50 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r5, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r6 = socket(0xa, 0x80001, 0x37)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(0xffffffffffffffff, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = dup2(r7, r8)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(0x0, 0x10000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

15:20:51 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:51 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:51 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:51 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:51 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:51 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:51 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:51 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:52 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:52 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:52 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x0, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:52 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:52 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x0, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:52 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:52 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:52 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:53 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:53 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:53 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x0, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

[ 1909.411635] EXT4-fs warning: 68 callbacks suppressed
[ 1909.411642] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1909.446528] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:20:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

[ 1909.540494] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1909.565677] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:20:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:53 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

[ 1909.718537] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1909.746046] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1909.759338] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1909.771051] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1909.784047] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1909.799794] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:20:54 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:54 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x0, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:54 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x0, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:54 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:54 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:54 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:55 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:55 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x0, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:55 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:55 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:55 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x0, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:55 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:55 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x0, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:56 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x0, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:56 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:56 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:56 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x0, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:56 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x0, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:56 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x0, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:56 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:56 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:56 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:56 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, 0x0, 0x0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r25 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r25, 0x40286608, &(0x7f00000000c0))
r26 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r26, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r26, 0x4c80, 0x0)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r27, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r28 = gettid()
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r29 = syz_open_procfs(r28, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r29, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r30 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r30, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r31 = open(0x0, 0x0, 0x0)
renameat2(r31, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r31, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r32 = gettid()
ptrace$setopts(0x4206, r32, 0x0, 0x0)
tkill(r32, 0x0)
syz_open_procfs(r32, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r33 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r33, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:57 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x0, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:57 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r23 = open(0x0, 0x0, 0x0)
renameat2(r23, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r23, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r25 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r24, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:57 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r23 = open(0x0, 0x0, 0x0)
renameat2(r23, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r23, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r25 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r24, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:57 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r23 = open(0x0, 0x0, 0x0)
renameat2(r23, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r23, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r25 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r24, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:57 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:57 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:58 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r23 = open(0x0, 0x0, 0x0)
renameat2(r23, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r23, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r25 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r24, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:58 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r23 = open(0x0, 0x0, 0x0)
renameat2(r23, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r23, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r25 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r24, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:58 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:58 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0x0, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

[ 1914.427109] EXT4-fs warning: 142 callbacks suppressed
[ 1914.427118] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1914.493520] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1914.508907] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1914.537504] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1914.553285] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:20:58 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x0, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:58 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r23 = open(0x0, 0x0, 0x0)
renameat2(r23, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r23, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r25 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r24, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

[ 1914.785970] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1914.837215] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:20:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

[ 1914.989157] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1915.011274] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1915.025783] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:20:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:20:59 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:59 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0x0, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:59 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r23 = open(0x0, 0x0, 0x0)
renameat2(r23, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r23, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r25 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r24, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:59 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, 0x0)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:59 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:20:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(0x0, 0x10000, 0x0)

15:20:59 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, 0x0)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:59 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r23 = open(0x0, 0x0, 0x0)
renameat2(r23, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r23, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r25 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r24, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:20:59 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0x0, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:00 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x0, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:00 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, 0x0)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:00 executing program 5:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r23 = open(0x0, 0x0, 0x0)
renameat2(r23, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r23, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r25 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r24, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:00 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x0, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(0x0, 0x10000, 0x0)

15:21:00 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:21:00 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, 0x0, &(0x7f0000000200))
r25 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, 0x0, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:00 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:21:00 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x801, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
r2 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000007)

15:21:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(0x0, 0x10000, 0x0)

15:21:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)

15:21:01 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x0, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:01 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, 0x0, &(0x7f0000000200))
r25 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, 0x0, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:01 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:21:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)

15:21:01 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x801, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
r2 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000007)

15:21:01 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x1, 0x0, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)

15:21:01 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, 0x0, &(0x7f0000000200))
r25 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, 0x0, r25, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:21:02 executing program 3:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x0, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:02 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:21:02 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x1, 0x0, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:02 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r6 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)='posix_acl_access*\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r6, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r7 = socket(0xa, 0x80001, 0x37)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(r8, r8)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = dup2(r8, r9)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r11})
r12 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r12, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)

15:21:02 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x801, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
r2 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000007)

15:21:02 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r5, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r6 = socket(0xa, 0x80001, 0x37)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(0xffffffffffffffff, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = dup2(r7, r8)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

15:21:03 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:21:03 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r24, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:03 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x1, 0x0, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:03 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:21:03 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

[ 1919.435455] EXT4-fs warning: 96 callbacks suppressed
[ 1919.435463] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1919.459843] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:21:03 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x0, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:03 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r24, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

[ 1919.537777] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1919.557447] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:21:03 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x801, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
r2 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)

[ 1919.738304] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1919.764852] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1919.782272] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:21:04 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

[ 1919.954858] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:21:04 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r24, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

[ 1920.049563] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
[ 1920.062854] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize
15:21:04 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0)
dup(r1)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='lapb0\x00', 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
r3 = open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x8)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9\x02\x00\x00\x00\x00\x00\x00\x00\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\t\x00\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5<k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xed\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{TM\xf4\x9e!t7\xcf\xdb\xdc\xfe\x18\xae\x84\"\x18\v\x95\x940\x17.\xa56.\x04\x00A\xb9@\xb51P\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xce\xab\xa65\x05\x00\xa5\x82j\x10Z\"\x1es\x84\x99\xa7\x89<\xcct,\xc0\xde\x1b_\xba\xd7\xed\x13\x94\x1f\xbcY\xffJ\xc1\x89\xa9J\xac\xef2=Z\x9f?H\xbb\xcc\x14\x95g\x03\xb9\xff\xd0\x8d\xab)\'\xff\x19k$\x97\xe5)\x9d\xe7\x1c\x1c2\a\xa1Vd\xc1vO\x98[\xc0!\xd0PZ\f\x05I\xbf\xd4r\x8ax!\xf0`\x8d3\xe4\xc7\r\x12\v%\xce\xf9\xfd\x95<qb;$+\xc8\xa0\x84V|\xf1\xd3sW\v\xa45OoI\x17wc\x1b\xa5w\x83\xf9\x9a\x01e\xbb2\xc8\x9e\x1c\xa1\x91\xee\xe6M\x84k\xb7[9\xd9H\xe6\xc1\x91r\x06\xf4\xf0\xf5\x81d\x7fo\xed\xd9\x11\x15\xfb{\xff<D\xfe4\x99hQ\x12?=\xe74\xef\xbf\xbb7ZT\xc3', 0x2)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000007)

15:21:04 executing program 4:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r24, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:04 executing program 0:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, 0x0, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0x0, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x0, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r26 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r26, 0x40286608, &(0x7f00000000c0))
r27 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r27, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r27, 0x4c80, 0x0)
r28 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r28, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r28, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r29 = gettid()
ptrace$setopts(0x4206, r29, 0x0, 0x0)
r30 = syz_open_procfs(r29, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r30, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r31 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r31, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r32 = open(0x0, 0x0, 0x0)
renameat2(r32, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r32, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r33 = gettid()
ptrace$setopts(0x4206, r33, 0x0, 0x0)
tkill(r33, 0x0)
syz_open_procfs(r33, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r34 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r34, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:04 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r24, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

[ 1920.404979] bdi-block not registered
[ 1920.409068] ------------[ cut here ]------------
[ 1920.413932] WARNING: CPU: 1 PID: 25319 at fs/fs-writeback.c:2204 __mark_inode_dirty.cold+0x2f/0x42
[ 1920.423048] Kernel panic - not syncing: panic_on_warn set ...
[ 1920.423048] 
[ 1920.430534] CPU: 1 PID: 25319 Comm: syz-executor.1 Not tainted 4.14.152+ #0
[ 1920.437633] Call Trace:
[ 1920.440220]  dump_stack+0xca/0x134
[ 1920.443760]  panic+0x1f1/0x3da
[ 1920.446944]  ? add_taint.cold+0x16/0x16
[ 1920.452555]  ? __mark_inode_dirty.cold+0x2f/0x42
[ 1920.457304]  ? __probe_kernel_read+0x163/0x1c0
[ 1920.461885]  ? __mark_inode_dirty.cold+0x2f/0x42
[ 1920.466993]  __warn.cold+0x2f/0x33
[ 1920.470545]  ? __mark_inode_dirty.cold+0x2f/0x42
[ 1920.475306]  report_bug+0x20a/0x248
[ 1920.478947]  do_error_trap+0x1bf/0x2d0
[ 1920.482829]  ? math_error+0x2d0/0x2d0
[ 1920.486627]  ? vprintk_emit+0xd5/0x330
[ 1920.490513]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1920.495450]  invalid_op+0x18/0x40
[ 1920.498913] RIP: 0010:__mark_inode_dirty.cold+0x2f/0x42
[ 1920.504350] RSP: 0018:ffff88817e90f448 EFLAGS: 00010286
[ 1920.509710] RAX: 0000000000000018 RBX: ffff888192e88198 RCX: 0000000000000000
[ 1920.516984] RDX: 0000000000000000 RSI: ffffc90005f56000 RDI: ffffed102fd21e7b
[ 1920.524477] RBP: ffff8881c8a93300 R08: 0000000000000018 R09: ffffed103b764ce9
[ 1920.531755] R10: ffffed103b764ce8 R11: ffff8881dbb26747 R12: ffff8881c8a93358
[ 1920.539016] R13: ffff888192e88270 R14: ffff8881c8a933b0 R15: ffff8881c8a93300
[ 1920.546316]  ? __mark_inode_dirty.cold+0x2f/0x42
[ 1920.551070]  mark_buffer_dirty+0x258/0x490
[ 1920.555332]  __block_commit_write.isra.0+0x138/0x210
[ 1920.560435]  block_write_end+0x42/0xf0
[ 1920.564319]  blkdev_write_end+0x3c/0x130
[ 1920.568389]  generic_perform_write+0x281/0x460
[ 1920.572994]  ? filemap_page_mkwrite+0x2d0/0x2d0
[ 1920.577667]  ? current_time+0xb0/0xb0
[ 1920.581478]  __generic_file_write_iter+0x32e/0x550
[ 1920.586419]  ? __kernel_text_address+0x9/0x30
[ 1920.590923]  blkdev_write_iter+0x1fb/0x3d0
[ 1920.595163]  ? check_disk_change+0x120/0x120
[ 1920.599583]  do_iter_readv_writev+0x379/0x580
[ 1920.604089]  ? clone_verify_area+0x1e0/0x1e0
[ 1920.608504]  ? avc_policy_seqno+0x5/0x10
[ 1920.612569]  ? security_file_permission+0x88/0x1e0
[ 1920.617521]  do_iter_write+0x152/0x550
[ 1920.621428]  vfs_iter_write+0x70/0xa0
[ 1920.625247]  iter_file_splice_write+0x560/0xa50
[ 1920.629938]  ? generic_file_splice_read+0x377/0x540
[ 1920.634962]  ? vmsplice_to_user+0x1e0/0x1e0
[ 1920.639309]  ? add_to_pipe+0x350/0x350
[ 1920.643224]  ? security_file_permission+0x88/0x1e0
[ 1920.648186]  ? vmsplice_to_user+0x1e0/0x1e0
15:21:04 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r24, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

15:21:04 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r5, 0x35, 0x18}, &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000740)="c191d54428e32b413affbe0ce9549505cf224be679783ace910c52c9e720c8509e07c042e9697a46664c2b62961407273734c03633", &(0x7f0000000780)=""/24)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9faba916530802", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x6000001}, 0x0)
r6 = socket(0xa, 0x80001, 0x37)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x260000, 0x0)
dup2(0xffffffffffffffff, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = dup2(r7, r8)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00')
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x904, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x514, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44085)
open(&(0x7f00000002c0)='./bus\x00', 0x10000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

[ 1920.652529]  direct_splice_actor+0x118/0x160
[ 1920.656996]  splice_direct_to_actor+0x292/0x760
[ 1920.661683]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 1920.666538]  ? do_splice_to+0x150/0x150
[ 1920.670532]  ? security_file_permission+0x88/0x1e0
[ 1920.675498]  do_splice_direct+0x177/0x240
[ 1920.679665]  ? splice_direct_to_actor+0x760/0x760
[ 1920.684531]  ? security_file_permission+0x88/0x1e0
[ 1920.689487]  do_sendfile+0x493/0xb20
[ 1920.693227]  ? do_compat_pwritev64+0x170/0x170
[ 1920.697926]  ? put_timespec64+0xbe/0x110
[ 1920.702178]  ? nsecs_to_jiffies+0x30/0x30
15:21:04 executing program 2:
socket(0x6ce0ef5ce7b59705, 0x5, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x5)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r3, &(0x7f00000064c0)=ANY=[@ANYBLOB="3b4d4cdc09b900000037010000a8e70000000000000000010000800000", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r5, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@local}}}, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r7, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0x0, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc)
fcntl$getown(r3, 0x9)
lstat(&(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresgid(0x0, 0x0, r8)
getgroups(0x5, &(0x7f00000004c0)=[0x0, r8, 0x0, 0x0, 0x0])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001c00))
fstat(r2, &(0x7f0000001c40))
getgid()
r9 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r9, 0x0)
syz_open_procfs(r9, &(0x7f00000001c0)='comm\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003300))
r10 = gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r10, 0x0)
syz_open_procfs(r10, 0x0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r12 = open(0x0, 0x0, 0x0)
renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
write$P9_RGETATTR(r11, &(0x7f0000000440)={0xa0, 0x19, 0x0, {0x1000, {}, 0x0, r13, r14, 0x7000000000000000, 0x0, 0x0, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000}}, 0xa0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003340)='/dev/loop-control\x00', 0x2, 0x0)
r15 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0)
r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r17 = open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
getgid()
write$P9_RGETATTR(r16, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380))
setresgid(0x0, 0x0, 0x0)
getgroups(0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0])
fstat(0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
setresgid(0x0, 0x0, r18)
getgroups(0x0, 0x0)
r19 = gettid()
ptrace$setopts(0xffffffffffffffff, r19, 0x0, 0x0)
tkill(r19, 0x0)
syz_open_procfs(r19, &(0x7f00000001c0)='comm\x00')
getpgrp(0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getgid()
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0])
openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r20, 0x4c80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005bc0)={{{@in6=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000005cc0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005d00), &(0x7f0000005d40)=0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
gettid()
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000340)=0x5)
r21 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r21, 0x4c81, 0x0)
r22 = gettid()
tkill(r22, 0x0)
syz_open_procfs(r22, 0x0)
r23 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r24 = open(0x0, 0x0, 0x0)
renameat2(r24, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r24, &(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
r26 = getgid()
write$P9_RGETATTR(r23, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x1000, {}, 0x10, r25, r26, 0x7000000000000000, 0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x100000000, 0xffffffff, 0xffffffffffff5b1c, 0x1, 0x658c8de4, 0x1000, 0x0, 0x5, 0x6, 0xdb9a}}, 0xa0)
inotify_init1(0x80000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
r27 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r27, 0x40286608, &(0x7f00000000c0))
r28 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r28, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r28, 0x4c80, 0x0)
r29 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r29, 0x40286608, &(0x7f00000000c0))
write$P9_RGETLOCK(r29, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
gettid()
openat$ashmem(0xffffffffffffff9c, &(0x7f0000005f80)='/dev/ashmem\x00', 0x84040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005fc0))
r30 = gettid()
ptrace$setopts(0x4206, r30, 0x0, 0x0)
r31 = syz_open_procfs(r30, &(0x7f00000001c0)='comm\x00')
ioctl$RNDZAPENTCNT(r31, 0x5204, &(0x7f0000000340)=0x5)
getuid()
getgid()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r32 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r32, 0x40286608, &(0x7f00000000c0))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00')
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r33 = open(0x0, 0x0, 0x0)
renameat2(r33, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r33, &(0x7f0000000000)='./file0\x00', 0x0)
getgid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000006440)=ANY=[@ANYBLOB="3b00000037010000a8e70000000000000000010000000000716f6712db123d62e6f2fe9eb3cbf3132ad4ac28d4111305dc4c346863b0", @ANYRES32=0x0, @ANYBLOB="1d00637075736574757365726e6f6465765d6b657972696e676c6f70726f63"], 0x3b)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
inotify_init1(0xc0800)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f000000b3c0)='/selinux/member\x00', 0x2, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r34 = gettid()
ptrace$setopts(0x4206, r34, 0x0, 0x0)
tkill(r34, 0x0)
syz_open_procfs(r34, &(0x7f00000001c0)='comm\x00')
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b400)={{{@in=@loopback, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f000000b500)=0xe8)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0))
r35 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r35, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f000000b540)='/dev/net/tun\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f000000b580)='/dev/ppp\x00', 0x4000, 0x0)
syz_open_procfs(r4, &(0x7f00000001c0)='comm\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

[ 1920.706350]  SyS_sendfile64+0x11f/0x140
[ 1920.710337]  ? SyS_sendfile+0x150/0x150
[ 1920.714328]  ? do_clock_gettime+0xd0/0xd0
[ 1920.718494]  ? do_syscall_64+0x43/0x520
[ 1920.722481]  ? SyS_sendfile+0x150/0x150
[ 1920.726462]  do_syscall_64+0x19b/0x520
[ 1920.730366]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1920.735557] RIP: 0033:0x45a219
[ 1920.738748] RSP: 002b:00007fa935a8bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1920.746817] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219
[ 1920.754095] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a
[ 1920.761372] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[ 1920.768662] R10: 0020000102000007 R11: 0000000000000246 R12: 00007fa935a8c6d4
[ 1920.776032] R13: 00000000004c7f94 R14: 00000000004de3b0 R15: 00000000ffffffff
[ 1920.784629] Kernel Offset: 0x34200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 1920.795693] Rebooting in 86400 seconds..