0000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:46 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:46 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f00000000c0)) 01:31:46 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:46 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:46 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:46 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f00000000c0)) 01:31:46 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f617474722f0a757272656e7400096d0987906b427e061f9d9aba1aa59fae9d0e8a287ece0da2b0dd83a8632c4afbe4ba63f27b3b361df26edb4249238e59adfb2de0bb1c7d34fcf9d7e5229a95325e231cdb10509c3d30479b8c3bf64e3e2c57c351db37cef0d2b67f6b8c2ad16b046d56063cee61415e3891268fe9de1d54576289d01f78efd84008d411133b268a06a7d0315f9400a08722ebb755ec3b401fb0abad21b2f49bc61b4628f59f8f86dfeee25bbd25aa5ff191bc9a14730c9d2c2b8f4d588e56b01cdbfb5fdb0970d94e23fd6ffb0b5d3cb820275955a2d98558ced20cb71c20bc62af66623a5beec2c6faa2e654c3830d91731f01edb13235b7f1592c9d483caf9a9eaac83e305a13a6329adbab2a41e237370faf9d129fc5e6b200000000000000000000000000000000246dfd07b30e69639343a0d5e04a22e4f32ee0f525444d3d390e1e4abf9b509e1852ce908e2475848f6b80f601a4488f57face6bcb555fdda63f5d3c4ce9fdfe138e3561c1001660c3d06b124cb76c7278048ce7979951d15913ea9d8f8357f637cfddf49908033540e20000"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:46 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:46 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:46 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:46 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:46 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f00000000c0)) 01:31:46 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:46 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:46 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:46 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) 01:31:46 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:47 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:47 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:47 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) 01:31:47 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:47 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:47 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32], 0x3c}}, 0x0) 01:31:47 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/14) 01:31:47 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:47 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) 01:31:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000480)={0x2}) 01:31:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:47 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/14) 01:31:47 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000004c0)=0x1, 0x4) 01:31:47 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) [ 608.816931] aa_setprocattr_changehat: 74 callbacks suppressed 01:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000480)={0x2}) 01:31:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:47 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/14) 01:31:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:47 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) 01:31:47 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000480)={0x2}) 01:31:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:47 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:47 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 01:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 01:31:47 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:47 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 01:31:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 01:31:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:47 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:47 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f6174"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:47 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 01:31:47 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:47 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 01:31:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:47 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:47 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) [ 608.816936] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:47 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) 01:31:47 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 01:31:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r6], 0x3c}}, 0x0) 01:31:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:48 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:48 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:48 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 01:31:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r6], 0x3c}}, 0x0) 01:31:48 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:48 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:48 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) [ 609.337043] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 609.567581] kauditd_printk_skb: 171 callbacks suppressed [ 609.567591] audit: type=1400 audit(1648085508.121:1051): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=7752 comm="syz-executor.2" 01:31:48 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r6], 0x3c}}, 0x0) 01:31:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:48 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) [ 609.701494] audit: type=1400 audit(1648085508.131:1052): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=7749 comm="syz-executor.4" 01:31:48 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='ch'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:48 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:48 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 01:31:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r6], 0x3c}}, 0x0) [ 609.763102] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 609.808875] audit: type=1400 audit(1648085508.131:1053): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=7749 comm="syz-executor.4" 01:31:48 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='ch'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:48 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='ch'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) [ 609.944603] audit: type=1400 audit(1648085508.161:1054): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=7752 comm="syz-executor.2" 01:31:48 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 01:31:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r6], 0x3c}}, 0x0) 01:31:48 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) [ 610.041529] audit: type=1400 audit(1648085508.221:1055): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=7763 comm="syz-executor.2" 01:31:48 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 01:31:48 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00\x00\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f617474722f0a757272656e7400096d0987906b427e061f9d9aba1aa59fae9d0e8a287ece0da2b0dd83a8632c4afbe4ba63f27b3b361df26edb4249238e59adfb2de0bb1c7d34fcf9d7e5229a95325e231cdb10509c3d30479b8c3bf64e3e2c57c351db37cef0d2b67f6b8c2ad16b046d56063cee61415e3891268fe9de1d54576289d01f78efd84008d411"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:48 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) [ 610.136409] nla_parse: 31 callbacks suppressed [ 610.136415] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 610.166344] audit: type=1400 audit(1648085508.231:1056): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=7763 comm="syz-executor.2" 01:31:48 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='ch'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:48 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='ch'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:48 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) [ 610.203377] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:48 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:48 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='ch'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) [ 610.207920] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 610.276327] audit: type=1400 audit(1648085508.271:1057): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=7761 comm="syz-executor.4" 01:31:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:48 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='ch'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x24000030) [ 610.331266] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:48 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:49 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='ch'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x24000030) 01:31:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) [ 610.438666] audit: type=1400 audit(1648085508.271:1058): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=7761 comm="syz-executor.4" 01:31:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:49 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) [ 610.484741] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x24000030) 01:31:49 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) [ 610.562022] audit: type=1400 audit(1648085508.321:1059): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=7773 comm="syz-executor.2" [ 610.574612] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 01:31:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:49 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) [ 610.637969] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:49 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f6174"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:49 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) [ 610.679316] AppArmor: change_hat: Invalid input '0x0000000' [ 610.709599] audit: type=1400 audit(1648085508.321:1060): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=7773 comm="syz-executor.2" 01:31:49 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:49 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:49 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f6174"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) [ 610.759143] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 610.770718] AppArmor: change_hat: Invalid input '0x0000000' [ 610.792397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 01:31:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:49 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) [ 610.807189] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:49 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:49 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) [ 610.822728] AppArmor: change_hat: Invalid input '0x0000000' 01:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 610.872833] AppArmor: change_hat: Invalid input '0x0000000' [ 610.934020] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 610.938244] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:49 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) [ 610.959571] AppArmor: change_hat: Invalid input '0x0000000' 01:31:49 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:49 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f6174"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:49 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) [ 611.002922] AppArmor: change_hat: Invalid input '0x0000000000000000' [ 611.117207] AppArmor: change_hat: Invalid input '0x0000000' 01:31:49 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:49 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:49 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) [ 611.140626] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 01:31:49 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) 01:31:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) [ 611.177916] AppArmor: change_hat: Invalid input '0x0000000000000000' [ 611.281454] AppArmor: change_hat: Invalid input '0x0000000' 01:31:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 01:31:49 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:49 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:49 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) 01:31:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:50 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='c'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) [ 611.296088] AppArmor: change_hat: Invalid input '0x0000000000000000' [ 611.439023] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:50 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) 01:31:50 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:50 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, 0x0, 0x2, 0x7}}, 0x48) 01:31:50 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:50 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) [ 611.439140] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 611.610023] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, 0x0, 0x0, 0x7}}, 0x48) 01:31:50 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:50 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:50 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, 0x0}}, 0x48) 01:31:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:50 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:50 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:50 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:50 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d258183227"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:50 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:50 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:50 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:50 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d258183227"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:50 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff13"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:50 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d258183227"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:50 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:50 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:50 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:50 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:50 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:50 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:51 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:51 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:51 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25070000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) 01:31:51 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:51 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:51 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:51 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:51 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:51 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:51 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:51 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:51 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) 01:31:51 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:51 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:51 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:52 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:52 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:52 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:52 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f61"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:52 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:52 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:52 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f61"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:52 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:52 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:52 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f61"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:52 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:52 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) [ 611.638601] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 613.850259] aa_setprocattr_changehat: 42 callbacks suppressed 01:31:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) [ 613.850264] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:52 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:52 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:52 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:52 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) [ 613.911646] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:52 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:52 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) [ 614.004555] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:52 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:52 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x15f141, 0x0) [ 614.073213] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:52 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:52 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 614.139967] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:52 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) [ 614.220744] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:52 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:52 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:31:52 executing program 0: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:52 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) [ 614.265878] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:53 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:53 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:53 executing program 0: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 614.381576] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 2: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:53 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:53 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:53 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) [ 614.428619] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 614.562637] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 614.576910] kauditd_printk_skb: 208 callbacks suppressed [ 614.576920] audit: type=1400 audit(1648085513.132:1269): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=8402 comm="syz-executor.1" 01:31:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:53 executing program 0: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:53 executing program 5: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:53 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x15f141, 0x0) 01:31:53 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:53 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 614.736795] audit: type=1400 audit(1648085513.142:1270): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=8393 comm="syz-executor.4" 01:31:53 executing program 5: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x15f141, 0x0) 01:31:53 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:53 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:53 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) [ 614.870220] audit: type=1400 audit(1648085513.142:1271): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=8393 comm="syz-executor.4" 01:31:53 executing program 5: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) 01:31:53 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:53 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:53 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:53 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:53 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) [ 615.031183] audit: type=1400 audit(1648085513.172:1272): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=8402 comm="syz-executor.1" 01:31:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) [ 615.124239] audit: type=1400 audit(1648085513.262:1273): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=8414 comm="syz-executor.1" 01:31:53 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:53 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:53 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) 01:31:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) [ 615.214384] nla_parse: 42 callbacks suppressed [ 615.214390] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 615.243289] audit: type=1400 audit(1648085513.262:1274): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=8414 comm="syz-executor.1" 01:31:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:53 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:53 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:53 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) 01:31:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:53 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) [ 615.333014] audit: type=1400 audit(1648085513.292:1275): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=8412 comm="syz-executor.4" 01:31:54 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:54 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) [ 615.427466] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 615.448476] audit: type=1400 audit(1648085513.292:1276): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=8412 comm="syz-executor.4" 01:31:54 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:54 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:54 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) 01:31:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) [ 615.549604] audit: type=1400 audit(1648085513.402:1277): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=8430 comm="syz-executor.4" [ 615.581191] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:54 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:54 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) [ 615.639393] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 615.661310] audit: type=1400 audit(1648085513.402:1278): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=8430 comm="syz-executor.4" 01:31:54 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) 01:31:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:54 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:54 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) [ 615.779391] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:54 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) [ 615.830651] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 01:31:54 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) 01:31:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}}, 0x24000030) 01:31:54 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) [ 615.914910] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 615.928409] split_token_from_name: 30 callbacks suppressed 01:31:54 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:54 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) 01:31:54 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:54 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changeh'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) [ 615.928414] AppArmor: change_hat: Invalid input '0x000' [ 615.998240] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 01:31:54 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) [ 616.038060] AppArmor: change_hat: Invalid input '0' [ 616.051337] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 01:31:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}}, 0x0) 01:31:54 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changeh'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) [ 616.116678] AppArmor: change_hat: Invalid input '0' [ 616.125421] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:54 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) 01:31:54 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changeh'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) 01:31:54 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:54 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) 01:31:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:54 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changeh'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:54 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x000'], 0x12c) 01:31:54 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) [ 616.262503] AppArmor: change_hat: Invalid input '0' 01:31:54 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:55 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x000'], 0x12c) [ 616.359757] AppArmor: change_hat: Invalid input '0' 01:31:55 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:55 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:55 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) [ 616.457646] AppArmor: change_hat: Invalid input '0x000' 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x000'], 0x12c) [ 616.499884] AppArmor: change_hat: Invalid input '0' 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:55 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x00000'], 0x12c) 01:31:55 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) [ 616.564727] AppArmor: change_hat: Invalid input '0x000' [ 616.650954] AppArmor: change_hat: Invalid input '0' 01:31:55 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) 01:31:55 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x000'], 0x12c) 01:31:55 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:55 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 01:31:55 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:55 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0'], 0x12c) 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:55 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:55 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:55 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) 01:31:55 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:55 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) 01:31:55 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) 01:31:55 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:55 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) 01:31:55 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:55 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) 01:31:55 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:55 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:55 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:55 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) 01:31:56 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) 01:31:56 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) 01:31:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:56 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:56 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:56 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:56 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:56 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:56 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:56 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:56 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:56 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f61"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:56 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:56 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:56 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, 0x0) 01:31:57 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:57 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:57 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:57 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, 0x0) 01:31:57 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:57 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, 0x0) 01:31:57 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:57 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:57 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:57 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c66"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, 0x0) 01:31:57 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:57 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) 01:31:57 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, 0x0, 0x0) 01:31:57 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:57 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:57 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000^\x00\x00\x00'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:57 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, 0x0, 0x0) 01:31:57 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:57 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0x0000000000000000'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:57 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, 0x0, 0x0) 01:31:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) [ 616.677252] AppArmor: change_hat: Invalid input '0x000' [ 618.906362] aa_setprocattr_changehat: 46 callbacks suppressed 01:31:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:57 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f6174"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:57 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:57 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f6174"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:57 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f6174"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:57 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:57 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 618.906366] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:57 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:31:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:57 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 619.083984] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 619.175915] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:57 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98ca2c6a3576e9b2b27cc23987185f27f0d0b98caf27ed92fe1ed1d415a7d25818322752077ae2a2420c9b83816dd4390d0d206c655c2f70726f632f73656c662e9c2f6174"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:57 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:57 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='ch'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:57 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:57 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r6], 0x3c}}, 0x0) 01:31:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) [ 619.206293] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:58 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030305e0000000000000000000002bb8daa933ab35e674bd378884d8ac5f87fafe5f1d4126ec13424e2ab3d98"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) 01:31:58 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r6], 0x3c}}, 0x0) 01:31:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r6], 0x3c}}, 0x0) 01:31:58 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 619.393815] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 01:31:58 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 01:31:58 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 619.578886] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 619.626998] kauditd_printk_skb: 163 callbacks suppressed [ 619.627006] audit: type=1400 audit(1648085518.182:1442): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=9004 comm="syz-executor.5" 01:31:58 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) 01:31:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 01:31:58 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/119) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 01:31:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf2507000000f7ff1300200000000c0010006d00c30000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000030) 01:31:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 619.806157] audit: type=1400 audit(1648085518.182:1443): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=9004 comm="syz-executor.5" 01:31:58 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 01:31:58 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) [ 619.904063] audit: type=1400 audit(1648085518.362:1444): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=9028 comm="syz-executor.1" 01:31:58 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 01:31:58 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/proc/self/attr/current\x00'}, 0x24) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x15f141, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/14) 01:31:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 620.032653] audit: type=1400 audit(1648085518.362:1445): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=9028 comm="syz-executor.1" 01:31:58 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r1, 0x0, 0xffffffffffffff18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0xffffffff, &(0x7f0000000140)=0x4) 01:31:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='change'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) r3 = syz_open_pts(r1, 0x2000) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r8], 0x3c}}, 0x0) 01:31:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 01:31:58 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x3, 0x5e, ['\\\x00', '\x89Yj\x00\x00\x00\x00\x00\x00\x00;\xc2\xf4\x00\x00/\xbf;\xbc\xee\x19R\x80=\x8d\fd\x91\xbe.P\xd2t\x8e\x00m\xc5\xeb\xaej\xb4z;\a\xaa-\x9d\xc0Kxz\xbd\xb4B@\xa7)\xa7\xe8\x8b\xdc-\x10']}, 0x5e) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x2, &(0x7f0000000080)=0x4) 01:31:58 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r1, 0x0, 0xffffffffffffff18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0xffffffff, &(0x7f0000000140)=0x4) [ 620.195142] audit: type=1400 audit(1648085518.752:1446): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=9067 comm="syz-executor.3" 01:31:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8d430dac65d7d3269a3e80d6278f9910ff716336fecece50f698ac515bd9959c645a91615be8e3b9f7cfe67e1d5063f64a5a849ea7453a27d83cbc40b3487a01cd0d8ee9d22a339258ed9a4dc35a16d4446ffa506394dc37a127cfece781ef1695b02b9cb5625818fcbfef9427cabdc1a4255bc9f6d48565b64b01f3f8376183cf4de1ed77b86ecf95af6554fc1734c27809620821c59d586a5bd5aba17ff6a27fef4488afdaf329cfa8560f1e0d51445df8b183dca0929e5ad9d93059536db21bb3092adabd857177f661a37c1f", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25050000000400018008000300030000002400018005000200810000000500020004000000060001000200000008000300e0000001080003000000000008000300060000000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 01:31:58 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='change'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 620.271828] nla_parse: 57 callbacks suppressed [ 620.271833] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:58 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r1, 0x0, 0xffffffffffffff18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0xffffffff, &(0x7f0000000140)=0x4) 01:31:58 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x3, 0x5e, ['\\\x00', '\x89Yj\x00\x00\x00\x00\x00\x00\x00;\xc2\xf4\x00\x00/\xbf;\xbc\xee\x19R\x80=\x8d\fd\x91\xbe.P\xd2t\x8e\x00m\xc5\xeb\xaej\xb4z;\a\xaa-\x9d\xc0Kxz\xbd\xb4B@\xa7)\xa7\xe8\x8b\xdc-\x10']}, 0x5e) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x2, &(0x7f0000000080)=0x4) 01:31:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) connect$nfc_llcp(r1, 0x0, 0x0) [ 620.321054] audit: type=1400 audit(1648085518.752:1447): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/self/attr/current" pid=9067 comm="syz-executor.3" [ 620.353783] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 01:31:58 executing program 1: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x3, 0x5e, ['\\\x00', '\x89Yj\x00\x00\x00\x00\x00\x00\x00;\xc2\xf4\x00\x00/\xbf;\xbc\xee\x19R\x80=\x8d\fd\x91\xbe.P\xd2t\x8e\x00m\xc5\xeb\xaej\xb4z;\a\xaa-\x9d\xc0Kxz\xbd\xb4B@\xa7)\xa7\xe8\x8b\xdc-\x10']}, 0x5e) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x2, &(0x7f0000000080)=0x4) 01:31:59 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='change'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:59 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r1, 0x0, 0xffffffffffffff18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 620.398026] audit: type=1400 audit(1648085518.862:1448): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9085 comm="syz-executor.3" 01:31:59 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x3, 0x5e, ['\\\x00', '\x89Yj\x00\x00\x00\x00\x00\x00\x00;\xc2\xf4\x00\x00/\xbf;\xbc\xee\x19R\x80=\x8d\fd\x91\xbe.P\xd2t\x8e\x00m\xc5\xeb\xaej\xb4z;\a\xaa-\x9d\xc0Kxz\xbd\xb4B@\xa7)\xa7\xe8\x8b\xdc-\x10']}, 0x5e) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x2, &(0x7f0000000080)=0x4) 01:31:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x24}, 0x1, 0x0, 0x0, 0x1050}, 0x40000) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:31:59 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r1, 0x0, 0xffffffffffffff18) 01:31:59 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 620.482676] audit: type=1400 audit(1648085518.862:1449): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":)'" pid=9085 comm="syz-executor.3" [ 620.498948] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:59 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x3, 0x5e, ['\\\x00', '\x89Yj\x00\x00\x00\x00\x00\x00\x00;\xc2\xf4\x00\x00/\xbf;\xbc\xee\x19R\x80=\x8d\fd\x91\xbe.P\xd2t\x8e\x00m\xc5\xeb\xaej\xb4z;\a\xaa-\x9d\xc0Kxz\xbd\xb4B@\xa7)\xa7\xe8\x8b\xdc-\x10']}, 0x5e) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 01:31:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) [ 620.575419] audit: type=1400 audit(1648085519.012:1450): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9100 comm="syz-executor.3" 01:31:59 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:59 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, 0x0, 0xffffffffffffff18) 01:31:59 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x3, 0x5e, ['\\\x00', '\x89Yj\x00\x00\x00\x00\x00\x00\x00;\xc2\xf4\x00\x00/\xbf;\xbc\xee\x19R\x80=\x8d\fd\x91\xbe.P\xd2t\x8e\x00m\xc5\xeb\xaej\xb4z;\a\xaa-\x9d\xc0Kxz\xbd\xb4B@\xa7)\xa7\xe8\x8b\xdc-\x10']}, 0x5e) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) [ 620.643224] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 620.644554] audit: type=1400 audit(1648085519.012:1451): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":)'" pid=9100 comm="syz-executor.3" 01:31:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:59 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 620.729743] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:31:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:59 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0xffffffffffffff18) 01:31:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:59 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:31:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) [ 620.830571] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 01:31:59 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:59 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:59 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0xffffffffffffff18) 01:31:59 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:31:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:59 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000008000c000300000006001a004e24000008000c0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:59 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0xffffffffffffff18) 01:31:59 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:31:59 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat '], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) [ 621.057013] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 01:31:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4044801) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:59 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:31:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r5], 0x3c}}, 0x0) 01:31:59 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:31:59 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, 0x0, 0xffffffffffffff18) 01:31:59 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:59 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:31:59 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0xffffffffffffff18) 01:31:59 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:59 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, 0x0, 0xffffffffffffff18) 01:31:59 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='changehat 0'], 0x12c) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 01:31:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 621.261166] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 621.286378] split_token_from_name: 41 callbacks suppressed 01:31:59 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:31:59 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0xffff0004, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r1, 0x0, 0xffffffffffffff18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 01:31:59 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:31:59 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:32:00 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f00000011c0)={0x1, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/3, 0x2, 0x1}}, 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, 0x0, 0xffffffffffffff18) 01:32:00 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) 01:32:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) [ 621.286383] AppArmor: change_hat: Invalid input '0' [ 621.438930] AppArmor: change_hat: Invalid input '0' [ 621.445419] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:32:00 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008c5}, 0x40) 01:32:00 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:32:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:00 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r2, 0x0, 0x3f) 01:32:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:32:00 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:32:00 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:00 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, 0x0, 0xffffffffffffff18) 01:32:00 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:32:00 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:00 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) [ 621.659305] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:32:00 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r2, 0x0, 0x3f) 01:32:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:00 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, 0x0, 0xffffffffffffff18) 01:32:00 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:32:00 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'permprofile ', ':)\'\x00'}, 0x2d) 01:32:00 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:00 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000080)=""/250, 0xfa, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:32:00 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 01:32:00 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:00 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, 0x0, 0xffffffffffffff18) 01:32:00 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r2, 0x0, 0x3f) 01:32:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 01:32:00 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 01:32:00 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:00 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, 0x0, 0xffffffffffffff18) 01:32:00 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) connect$nfc_llcp(r2, 0x0, 0x3f) 01:32:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 01:32:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:00 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 01:32:00 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:00 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, 0x0, 0xffffffffffffff18) 01:32:00 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x1) connect$nfc_llcp(r2, 0x0, 0x3f) 01:32:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 01:32:00 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:00 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0xffffffffffffff18) 01:32:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, &(0x7f0000000000)=""/56, 0x2, 0x7}}, 0x48) 01:32:00 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) connect$nfc_llcp(r2, 0x0, 0x3f) 01:32:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:00 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 01:32:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:00 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0xffffffffffffff18) 01:32:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, 0x0, 0x2, 0x7}}, 0x48) 01:32:00 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r2, 0x0, 0x3f) 01:32:00 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:00 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0xffffffffffffff18) 01:32:00 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x3f) 01:32:01 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9bab04c270726f66696c65202f00"], 0xe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000040)) 01:32:01 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, 0x0, 0x0, 0x7}}, 0x48) 01:32:01 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x3f) 01:32:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:01 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0xdd, 0x1) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = getpgid(0x0) getpgid(r2) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x3, &(0x7f0000000080)) 01:32:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x310, 0xb5, 0x7, 0x4, 0x40, @multicast}, 0x10) 01:32:01 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, 0x0}}, 0x48) 01:32:01 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x3f) 01:32:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:01 executing program 3: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x3f) 01:32:01 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x10001) r0 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpeername$llc(r1, 0x0, 0x0) recvfrom$llc(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x40000000, &(0x7f0000001080)={0x1a, 0x303, 0x5, 0xf8, 0x0, 0xe1, @multicast}, 0x10) 01:32:01 executing program 5: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/\x00'}, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x41786c26d4989c11, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:audisp_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2b}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 01:32:01 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:01 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:01 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, 0x0, 0x3f) 01:32:01 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:01 executing program 5: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/\x00'}, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x41786c26d4989c11, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:audisp_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2b}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 01:32:01 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000000)=0xfffffffe) 01:32:01 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) connect$nfc_llcp(r0, 0x0, 0x0) 01:32:01 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, 0x0, 0x3f) 01:32:02 executing program 4: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, 0x0, 0x3f) 01:32:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:02 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpeername$llc(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40810c4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000)=0x8, 0x4) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', 'x9\xaf\x13\xd8a0\xa1\x10\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r2, 0x0, 0x0) 01:32:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) 01:32:02 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) 01:32:02 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, 0x0, 0x3f) 01:32:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:02 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/\x00'}, 0xe) 01:32:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000240), 0x5, 0x42202) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="c532ca37c815b296a093745b116860d0957264ccd05455d5d3e5bac27d2b18bdd4f9c87ff47f4c764ddc11e1b6e336a83c7d219086c2e40bdf3f2c8a9df2e882325cb098ad3adf3519254f3ffb3b697aeb9293365bc1", 0x56, 0x80, &(0x7f0000000040)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000001c0)=0x9) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000200)=0x3) 01:32:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d1"], 0x3c}}, 0x0) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$nfc_llcp(r2, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x20000082) 01:32:02 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, 0x0, 0x3f) 01:32:02 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000240), 0x5, 0x42202) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="c532ca37c815b296a093745b116860d0957264ccd05455d5d3e5bac27d2b18bdd4f9c87ff47f4c764ddc11e1b6e336a83c7d219086c2e40bdf3f2c8a9df2e882325cb098ad3adf3519254f3ffb3b697aeb9293365bc1", 0x56, 0x80, &(0x7f0000000040)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000001c0)=0x9) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000200)=0x3) 01:32:02 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, 0x0, 0x3f) 01:32:02 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x9, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x661) write$apparmor_current(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x82a, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) 01:32:02 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0), 0xc) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) write$apparmor_current(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000070440000007c65202f00"], 0xe) 01:32:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:02 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:02 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, 0x0, 0x3f) 01:32:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000240), 0x5, 0x42202) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="c532ca37c815b296a093745b116860d0957264ccd05455d5d3e5bac27d2b18bdd4f9c87ff47f4c764ddc11e1b6e336a83c7d219086c2e40bdf3f2c8a9df2e882325cb098ad3adf3519254f3ffb3b697aeb9293365bc1", 0x56, 0x80, &(0x7f0000000040)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000001c0)=0x9) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000200)=0x3) 01:32:02 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x9, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x661) write$apparmor_current(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x82a, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) 01:32:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:02 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0), 0xc) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) write$apparmor_current(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000070440000007c65202f00"], 0xe) [ 624.132551] hid-generic 0001:0009:0000.0054: item fetching failed at offset 15/41 [ 624.140386] hid-generic: probe of 0001:0009:0000.0054 failed with error -22 01:32:02 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:02 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x3f) 01:32:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000240), 0x5, 0x42202) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="c532ca37c815b296a093745b116860d0957264ccd05455d5d3e5bac27d2b18bdd4f9c87ff47f4c764ddc11e1b6e336a83c7d219086c2e40bdf3f2c8a9df2e882325cb098ad3adf3519254f3ffb3b697aeb9293365bc1", 0x56, 0x80, &(0x7f0000000040)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000001c0)=0x9) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:02 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x9, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x661) write$apparmor_current(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x82a, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) 01:32:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:02 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) [ 624.328135] hid-generic 0001:0009:0000.0055: item fetching failed at offset 15/41 [ 624.345920] hid-generic: probe of 0001:0009:0000.0055 failed with error -22 01:32:02 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0), 0xc) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) write$apparmor_current(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000070440000007c65202f00"], 0xe) 01:32:02 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x3f) 01:32:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000240), 0x5, 0x42202) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="c532ca37c815b296a093745b116860d0957264ccd05455d5d3e5bac27d2b18bdd4f9c87ff47f4c764ddc11e1b6e336a83c7d219086c2e40bdf3f2c8a9df2e882325cb098ad3adf3519254f3ffb3b697aeb9293365bc1", 0x56, 0x80, &(0x7f0000000040)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:03 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x9, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x661) write$apparmor_current(r0, 0x0, 0x0) 01:32:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:03 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x3f) 01:32:03 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0), 0xc) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) 01:32:03 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x41, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) [ 624.500424] hid-generic 0001:0009:0000.0056: item fetching failed at offset 15/41 [ 624.528004] hid-generic: probe of 0001:0009:0000.0056 failed with error -22 01:32:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:03 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x9, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x661) 01:32:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000240), 0x5, 0x42202) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="c532ca37c815b296a093745b116860d0957264ccd05455d5d3e5bac27d2b18bdd4f9c87ff47f4c764ddc11e1b6e336a83c7d219086c2e40bdf3f2c8a9df2e882325cb098ad3adf3519254f3ffb3b697aeb9293365bc1", 0x56, 0x80, &(0x7f0000000040)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x3}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:03 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x661) 01:32:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 624.615632] hid-generic 0001:0009:0000.0057: item fetching failed at offset 15/41 01:32:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000240), 0x5, 0x42202) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="c532ca37c815b296a093745b116860d0957264ccd05455d5d3e5bac27d2b18bdd4f9c87ff47f4c764ddc11e1b6e336a83c7d219086c2e40bdf3f2c8a9df2e882325cb098ad3adf3519254f3ffb3b697aeb9293365bc1", 0x56, 0x80, &(0x7f0000000040)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x3}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000001c0)={0x1, 0x0, 0x12, 0x1e, 0x138, &(0x7f0000000540)}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="a5e583b56d5e7cb5e4190af0aa7928f948b5bc4f5d08b7596e028c368383b9676102d3c2c065c4e5c50b94b7df6b478759ba4638699cdb1d6dca65264ecfec6186c1afb730eb6dabf38417d929", @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:32:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:03 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x661) [ 624.666260] hid-generic: probe of 0001:0009:0000.0057 failed with error -22 01:32:03 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0), 0xc) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 01:32:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000240), 0x5, 0x42202) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="c532ca37c815b296a093745b116860d0957264ccd05455d5d3e5bac27d2b18bdd4f9c87ff47f4c764ddc11e1b6e336a83c7d219086c2e40bdf3f2c8a9df2e882325cb098ad3adf3519254f3ffb3b697aeb9293365bc1", 0x56, 0x80, &(0x7f0000000040)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x3}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:03 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:03 executing program 4: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x661) 01:32:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:03 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x9, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x661) 01:32:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000240), 0x5, 0x42202) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fb"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 624.773037] hid-generic 0001:0009:0000.0058: item fetching failed at offset 15/41 [ 624.780839] hid-generic: probe of 0001:0009:0000.0058 failed with error -22 01:32:03 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x4e, 0x20a, &(0x7f0000000080)="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"}) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) write$apparmor_current(r1, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f00000004c0)) 01:32:03 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0), 0xc) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:03 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:03 executing program 4: r0 = syz_open_dev$sndmidi(0x0, 0x9, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x661) 01:32:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fb"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:03 executing program 4: r0 = syz_open_dev$sndmidi(0x0, 0x9, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x661) 01:32:03 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x4e, 0x20a, &(0x7f0000000080)="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"}) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) write$apparmor_current(r1, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f00000004c0)) 01:32:03 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fb"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:03 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0), 0xc) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:03 executing program 4: r0 = syz_open_dev$sndmidi(0x0, 0x9, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x661) [ 624.889581] hid-generic 0001:0009:0000.0059: item fetching failed at offset 15/41 [ 624.911359] hid-generic: probe of 0001:0009:0000.0059 failed with error -22 01:32:03 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:32:03 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x4e, 0x20a, &(0x7f0000000080)="22a960454b85d93d44a65f83d9fa7f719f51d870b4f5146f26f13004aea6db2ba3cfec76f8c0a01920da58835b8383aa7534f45b9ef1547dbaebc912452e2f80342f7e99e52cebb07236e4802cbb4dfa08aeb59dfdf9a37233f3b380a06e430aa75d5cfcbd38e6f7b2ef5c5cab8c2ecd899dd1420addc44bb3775d35833b908e135551da6c6ccbe5aab0e2fce2e4b7057afa02a6aa5eea39326030348630a6ce2a00c82e716e2546eff2fa3cee0e4982d367eb35ae331f9d2c7d54bcf9a3f69d1b2f78f2b774c0602e51348a86ad0ccb52e0aa6c7081ed3a3ab4285797a310addd77a52c19768b9cbf9f7f481cf3bda22d930a208123bd50399326b3e56588439ad4bffeb6578622b6360a36b88bb6dfe7095cb1f6434d9c2515783a60457c8a85f303cc4b653eb1e9992df9702a9adfe66fc96af248447017de8696460cf02a4ebb2c3f80735528bd23cad59e53937f62f73bc4732862da8ec30a42ae17db45662618ed1fac85be088375cb975cf0183970535736fe0f2087dbcd5e91c92b8f59480665a7a7f4cef9693b68fca146fc306432e5161a002d346947bcf5b2347918c2837f809aef64d25ca978b21b0fcb410c4b02542bfdc539b19eb3d78cbcdabb4714114d9d0f3f50ff8ac76ba12979ac680e2d4b4a5fc2fb9999c0282c517da5743617bd6bc193e32841c8fa5422804417b131a577fd8b032dd2011bac1a4a0f627430bae540544842b2791e04cdadedc8de812b221055178f35c9d360c92b4677c555c9fcc9aece5ea0ea2d374818512aa3ae534833472e8d429cc533c8161222109190a8bb667d22e0850d845438748c965672a679dd7d018376eb3eeab628c23c86494d65a781ee46e43c2d897b963f96cce3331bacb039872471738794e825e74c17d6172ffbdf5e29e21573a0c44ea4a457fb24afbac27b80962b217b2baffd181102ca736419e9737743ac3d27cd5f8179240d225885dc4ae6f525b6289d09093b3b22afb4950d4940065a46778c8a1fef11e8c3b6ad350e02fb303ccffd427a99162f0973dd957ba5df32cb78a81ae175a8a4f3f3145cc7f8a0234d810d4523a0cbbded7efe69c110642eedb1fa982364d9826cd29dfeab1d14a1e9dd66ba95f5ec833fa64b19bc76df2c1b0bf0e435d6b7360463f7b5378d3ee5258ff656bc24dfe4f3e6add55e8f82d6f5a91d4291b44df9f4f9a4d5c6eb95c8ef0c338a4daef8c8301388383b02a11dd2bf847433ca97e98bbdf928a729b9b80f6f9a0be23221e50545de32f74e0c526e03b190da945c472f0e8275a536d23fc25cf18d2417ad24e2d2849819d42aab83736673704073dc59366e5b978a5388136440bb7e2dfee316a5ce5174a6d70d5f277cf43f084a5ca98b82f39f136b96b38f7ef231c6e4e0e22cf11531af49f761a002e359959a446473ba9a8a2dda594a"}) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) write$apparmor_current(r1, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f00000004c0)) 01:32:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:03 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) 01:32:03 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x40140) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x661) [ 625.003390] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.010103] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 01:32:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:03 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:03 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x4e, 0x20a, &(0x7f0000000080)="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"}) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) write$apparmor_current(r1, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) 01:32:03 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fb"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 625.059359] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.102436] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.129810] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.146829] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.158264] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.168966] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.176215] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.183264] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.189953] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.196731] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.203701] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.210388] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.217376] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.224142] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.238151] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.245112] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.252107] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.258800] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.267601] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.277056] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.285376] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.296713] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.305214] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.319515] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.328138] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.336615] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.345208] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.353186] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.360726] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.369692] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.377534] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.385307] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.393640] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.400326] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.409196] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.417636] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.425982] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.434008] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.440694] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.449511] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.457335] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.465288] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.473563] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.480237] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.489661] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.497487] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.505845] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.513706] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.520401] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.529394] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.537253] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.545015] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.554256] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.560933] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.569614] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.577497] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.585922] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.594855] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.601644] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.610399] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.618248] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.627122] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.635052] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.643522] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.650200] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.658886] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.666632] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.675068] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.683360] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.690045] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.699339] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 01:32:04 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0), 0xc) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:04 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x661) 01:32:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:04 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:04 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x4e, 0x20a, &(0x7f0000000080)="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"}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) 01:32:04 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 625.707440] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.715275] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.723534] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.730207] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.738922] hid-generic 0002:0001:0005.005A: unknown main item tag 0x0 [ 625.747664] hid-generic 0002:0001:0005.005A: hidraw0: HID vff.fe Device [syz0] on syz1 01:32:04 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:04 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x4e, 0x20a, &(0x7f0000000080)="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"}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) [ 625.795411] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 625.807085] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 625.822491] nla_parse: 32 callbacks suppressed [ 625.822496] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:32:04 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x661) 01:32:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 625.854958] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 625.877250] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 625.889414] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 01:32:04 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) 01:32:04 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x4e, 0x20a, &(0x7f0000000080)="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"}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) [ 625.905956] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 625.927086] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 625.947387] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 625.960782] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 625.970856] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 625.985020] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.003154] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.009950] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.017804] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.024818] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.031569] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.039130] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.046126] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.053347] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.060095] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.067512] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.076760] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.083751] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.090454] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.097431] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.104385] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.111055] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.117943] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.124782] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.131452] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.138217] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.145100] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.151901] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.158613] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.165344] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.172094] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.178762] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.185490] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.192267] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.198961] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.205718] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.212522] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.219193] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.225907] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.232651] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.239325] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.246037] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.252795] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.259466] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.266206] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.272964] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.279633] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.286357] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.293100] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.299765] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.306504] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.313275] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.319949] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.326699] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.333450] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.340197] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.346940] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.354397] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.361058] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.367786] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.374530] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.381192] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.387913] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.394663] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.401337] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.408077] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.414827] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.421490] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.428225] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.434976] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.441706] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.448376] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.455134] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 01:32:05 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0), 0xc) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:05 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fb"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:05 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x661) 01:32:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) 01:32:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:05 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x4e, 0x20a, &(0x7f0000000080)="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"}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) [ 626.461864] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.468549] hid-generic 0002:0001:0005.005B: unknown main item tag 0x0 [ 626.476633] hid-generic 0002:0001:0005.005B: hidraw0: HID vff.fe Device [syz0] on syz1 01:32:05 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x4e, 0x20a, &(0x7f0000000080)="22a960454b85d93d44a65f83d9fa7f719f51d870b4f5146f26f13004aea6db2ba3cfec76f8c0a01920da58835b8383aa7534f45b9ef1547dbaebc912452e2f80342f7e99e52cebb07236e4802cbb4dfa08aeb59dfdf9a37233f3b380a06e430aa75d5cfcbd38e6f7b2ef5c5cab8c2ecd899dd1420addc44bb3775d35833b908e135551da6c6ccbe5aab0e2fce2e4b7057afa02a6aa5eea39326030348630a6ce2a00c82e716e2546eff2fa3cee0e4982d367eb35ae331f9d2c7d54bcf9a3f69d1b2f78f2b774c0602e51348a86ad0ccb52e0aa6c7081ed3a3ab4285797a310addd77a52c19768b9cbf9f7f481cf3bda22d930a208123bd50399326b3e56588439ad4bffeb6578622b6360a36b88bb6dfe7095cb1f6434d9c2515783a60457c8a85f303cc4b653eb1e9992df9702a9adfe66fc96af248447017de8696460cf02a4ebb2c3f80735528bd23cad59e53937f62f73bc4732862da8ec30a42ae17db45662618ed1fac85be088375cb975cf0183970535736fe0f2087dbcd5e91c92b8f59480665a7a7f4cef9693b68fca146fc306432e5161a002d346947bcf5b2347918c2837f809aef64d25ca978b21b0fcb410c4b02542bfdc539b19eb3d78cbcdabb4714114d9d0f3f50ff8ac76ba12979ac680e2d4b4a5fc2fb9999c0282c517da5743617bd6bc193e32841c8fa5422804417b131a577fd8b032dd2011bac1a4a0f627430bae540544842b2791e04cdadedc8de812b221055178f35c9d360c92b4677c555c9fcc9aece5ea0ea2d374818512aa3ae534833472e8d429cc533c8161222109190a8bb667d22e0850d845438748c965672a679dd7d018376eb3eeab628c23c86494d65a781ee46e43c2d897b963f96cce3331bacb039872471738794e825e74c17d6172ffbdf5e29e21573a0c44ea4a457fb24afbac27b80962b217b2baffd181102ca736419e9737743ac3d27cd5f8179240d225885dc4ae6f525b6289d09093b3b22afb4950d4940065a46778c8a1fef11e8c3b6ad350e02fb303ccffd427a99162f0973dd957ba5df32cb78a81ae175a8a4f3f3145cc7f8a0234d810d4523a0cbbded7efe69c110642eedb1fa982364d9826cd29dfeab1d14a1e9dd66ba95f5ec833fa64b19bc76df2c1b0bf0e435d6b7360463f7b5378d3ee5258ff656bc24dfe4f3e6add55e8f82d6f5a91d4291b44df9f4f9a4d5c6eb95c8ef0c338a4daef8c8301388383b02a11dd2bf847433ca97e98bbdf928a729b9b80f6f9a0be23221e50545de32f74e0c526e03b190da945c472f0e8275a536d23fc25cf18d2417ad24e2d2849819d42aab83736673704073dc59366e5b978a5388136440bb7e2dfee316a5ce5174a6d70d5f277cf43f084a5ca98b82f39f136b96b38f7ef231c6e4e0e22cf11531af49f761a002e359959a446473ba9a8a2dda594a"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) 01:32:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) 01:32:05 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x9, @mcast1, 0x4, 0x1}, 0x20) [ 626.532297] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 626.544383] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.551086] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 01:32:05 executing program 2: syz_open_pts(0xffffffffffffffff, 0xc0000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) 01:32:05 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x661) 01:32:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) [ 626.597028] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 626.620334] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.653780] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.672209] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.686746] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.694067] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.700758] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.707978] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.715042] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.722043] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.728730] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.737843] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.746370] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.757829] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.770350] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.781065] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.789038] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.797455] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.805346] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.813805] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.820505] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.830188] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.837999] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.845886] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.853747] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.860420] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.869229] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.877725] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.886421] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.894258] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.900939] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.909668] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.918388] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.926271] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.934338] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.941357] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.950213] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.958610] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.966424] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.974374] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.981059] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.989792] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 626.997738] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.005591] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.014031] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.020734] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.030054] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.037935] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.046162] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.054024] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.060703] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.069743] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.077627] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.085415] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.094252] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.100925] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.109663] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.117466] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.125762] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.134199] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.140877] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.149669] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.158194] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.166084] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.173915] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.180584] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.189400] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.197276] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.205334] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.213295] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.219978] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.229207] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.237008] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.245083] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.253297] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 01:32:05 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:05 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)=0x3d) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYBLOB="fdc574c3709bb3c46c3ff44a943afd20137b33bd103b87023c7d3921045dc3903d598d80982d59b8b22a073572335712317559688df5c02ff3131581353aff828123c3473b1b80a00f0dd9e8c4b3b367fae4dfbcf8839c395d959e625f954666eb0e389cbd07db05ea5b5712abc87f3b7a5c"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008a4a0000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00f8d02d7000fbed694797000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r7], 0x3c}}, 0x0) 01:32:05 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 01:32:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:05 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) 01:32:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x1}, 0x20) [ 627.259966] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.268650] hid-generic 0002:0001:0005.005C: unknown main item tag 0x0 [ 627.277626] hid-generic 0002:0001:0005.005C: hidraw0: HID vff.fe Device [syz0] on syz1 01:32:05 executing program 2: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4e180, 0x0) 01:32:05 executing program 4: syz_open_pts(0xffffffffffffffff, 0xc0000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) 01:32:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000080)) [ 627.335718] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 01:32:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x1}, 0x20) 01:32:05 executing program 4: syz_open_pts(0xffffffffffffffff, 0xc0000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) 01:32:05 executing program 2: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4e180, 0x0) [ 627.375885] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 627.387718] hid-generic 0001:0009:0000.005D: item fetching failed at offset 15/41 [ 627.409062] hid-generic: probe of 0001:0009:0000.005D failed with error -22 01:32:06 executing program 5: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed6947"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:06 executing program 3: inotify_init() r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x96000076) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040), 0x2) 01:32:06 executing program 2: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4e180, 0x0) 01:32:06 executing program 4: syz_open_pts(0xffffffffffffffff, 0xc0000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) 01:32:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) 01:32:06 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 01:32:06 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) 01:32:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed6947"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:06 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000080)=""/84) write$apparmor_current(r1, &(0x7f00000002c0)=@profile={'stack ', '/\xfa\xbd\x885\x9f)m<0\x12\xe6\xf1\x94prom/tmr\xe21d-self/attr/current\x00X\xe8\xf5\x05s\x8f{\x93\x8cz\x8c\x966\x1e\xcf)\x9c\xa1;>\x12{\x00\x04!\xa5\xb4\xea\xabq\x13\x1b\x92!k\x838\xef\xa5i\x7f\x12}K\xab\\\xdf\xf3\xf8\xc6\xe7\x90\x92\xa6&]Op\x96\x05\xa7kD\x8e\xbe\xe3q\x15~\x80,\x90n\xcb\xb4E\xd4v\xef\x13\x04a\xcde'}, 0x86) write$apparmor_current(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="58bb89b76259fcb517cc0824611a3c9bf30643102210c281e90ad7110d81d006f9ace0521936996541da152618f75a4ae55ee7797e9962a6a291aa6bcd20665a9451df3a89a3bfecde3bfd93304a1e2464723a01b8cb7ac0a8af18693c1e3528ee7f6e38d2c3e9c46e4e3cc90800000000000000501e095f348cb28fec8611737a4ab0a2eaa4bbb3afddb2052e9ae1a786b0349762338fbf33d0e9887e571521693690dede565d95a61d", @ANYRES32=r0], 0xe) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8001, 0x3}, 0x20) 01:32:06 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 627.492225] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:32:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$inet_sctp(0x2, 0x1, 0x84) 01:32:06 executing program 5: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$inet_sctp(0x2, 0x1, 0x84) 01:32:06 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 01:32:06 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4e180, 0x0) 01:32:06 executing program 5: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x188, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x20}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5b}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x3e0}, {0x8, 0x13, 0x7f}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4041) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, 0x0, &(0x7f0000000080)) [ 627.577398] kauditd_printk_skb: 16 callbacks suppressed [ 627.577406] audit: type=1400 audit(1648085526.133:1468): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=2FFABD88359F296D3C3012E6F19470726F6D2F746D72E231642D73656C662F617474722F63757272656E74 pid=9830 comm="syz-executor.1" [ 627.603890] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:32:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed6947"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:06 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) 01:32:06 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:06 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4e180, 0x0) 01:32:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000000c0)={0xd, 0x2}) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$TIOCEXCL(r3, 0x540c) r4 = syz_open_pts(0xffffffffffffffff, 0x10000) ioctl$TCSBRKP(r4, 0x5425, 0x1) connect$nfc_llcp(r2, 0x0, 0x0) 01:32:06 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 1) 01:32:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) (fail_nth: 1) 01:32:06 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:06 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4e180, 0x0) [ 627.753276] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:32:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:06 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) (fail_nth: 1) 01:32:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) 01:32:06 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 01:32:06 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) [ 627.806131] FAULT_INJECTION: forcing a failure. [ 627.806131] name failslab, interval 1, probability 0, space 0, times 0 01:32:06 executing program 2: syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040), 0x8, 0x4040c0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x302, 0xdf, 0xff, 0x40, 0x7}, 0x10) r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) connect$llc(r2, &(0x7f0000000140)={0x1a, 0x103, 0xdb, 0xff, 0x5, 0xfd}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, 0x0) 01:32:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:06 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) [ 627.875116] CPU: 1 PID: 9872 Comm: syz-executor.3 Not tainted 4.14.273-syzkaller #0 [ 627.882942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.892294] Call Trace: [ 627.894888] dump_stack+0x1b2/0x281 [ 627.898522] should_fail.cold+0x10a/0x149 [ 627.902678] should_failslab+0xd6/0x130 [ 627.906661] kmem_cache_alloc+0x28e/0x3c0 [ 627.910812] getname_flags+0xc8/0x550 [ 627.914613] do_sys_open+0x1ce/0x410 [ 627.918334] ? filp_open+0x60/0x60 [ 627.921876] ? __do_page_fault+0x159/0xad0 [ 627.926109] ? do_syscall_64+0x4c/0x640 [ 627.930082] ? SyS_open+0x30/0x30 [ 627.933546] do_syscall_64+0x1d5/0x640 [ 627.937438] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 627.942629] RIP: 0033:0x7f2fb5857049 [ 627.946333] RSP: 002b:00007f2fb41cc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 627.954041] RAX: ffffffffffffffda RBX: 00007f2fb5969f60 RCX: 00007f2fb5857049 [ 627.961315] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 627.968577] RBP: 00007f2fb41cc1d0 R08: 0000000000000000 R09: 0000000000000000 01:32:06 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 2) 01:32:06 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 01:32:06 executing program 2: syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040), 0x8, 0x4040c0) (async) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x302, 0xdf, 0xff, 0x40, 0x7}, 0x10) (async) r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) connect$llc(r2, &(0x7f0000000140)={0x1a, 0x103, 0xdb, 0xff, 0x5, 0xfd}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, 0x0) 01:32:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:06 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) (async) [ 627.975851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.983149] R13: 00007ffdb42eef7f R14: 00007f2fb41cc300 R15: 0000000000022000 01:32:06 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 01:32:06 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:06 executing program 2: syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040), 0x8, 0x4040c0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x302, 0xdf, 0xff, 0x40, 0x7}, 0x10) r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) connect$llc(r2, &(0x7f0000000140)={0x1a, 0x103, 0xdb, 0xff, 0x5, 0xfd}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000040), 0x8, 0x4040c0) (async) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x302, 0xdf, 0xff, 0x40, 0x7}, 0x10) (async) accept4$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) (async) connect$llc(r2, &(0x7f0000000140)={0x1a, 0x103, 0xdb, 0xff, 0x5, 0xfd}, 0x10) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, 0x0) (async) 01:32:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) 01:32:06 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) [ 628.101214] FAULT_INJECTION: forcing a failure. [ 628.101214] name failslab, interval 1, probability 0, space 0, times 0 [ 628.163773] CPU: 0 PID: 9912 Comm: syz-executor.3 Not tainted 4.14.273-syzkaller #0 [ 628.171600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.171833] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.180952] Call Trace: [ 628.188253] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.190203] dump_stack+0x1b2/0x281 [ 628.190220] should_fail.cold+0x10a/0x149 [ 628.190233] should_failslab+0xd6/0x130 [ 628.190244] kmem_cache_alloc+0x28e/0x3c0 [ 628.197324] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.200522] get_empty_filp+0x86/0x3f0 [ 628.200534] path_openat+0x84/0x2970 [ 628.200547] ? get_pid_task+0x91/0x130 [ 628.205356] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.208635] ? path_lookupat+0x780/0x780 [ 628.208647] ? trace_hardirqs_on+0x10/0x10 [ 628.208666] do_filp_open+0x179/0x3c0 [ 628.213144] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.219444] ? may_open_dev+0xe0/0xe0 [ 628.219455] ? __alloc_fd+0x1be/0x490 [ 628.219470] ? lock_downgrade+0x740/0x740 [ 628.219481] ? do_raw_spin_unlock+0x164/0x220 [ 628.223634] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.227045] ? _raw_spin_unlock+0x29/0x40 [ 628.227055] ? __alloc_fd+0x1be/0x490 [ 628.227071] do_sys_open+0x296/0x410 [ 628.227081] ? filp_open+0x60/0x60 [ 628.231059] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.237623] ? __do_page_fault+0x159/0xad0 [ 628.237633] ? do_syscall_64+0x4c/0x640 [ 628.237640] ? SyS_open+0x30/0x30 [ 628.237651] do_syscall_64+0x1d5/0x640 [ 628.237668] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 628.237676] RIP: 0033:0x7f2fb5857049 [ 628.237683] RSP: 002b:00007f2fb41cc168 EFLAGS: 00000246 [ 628.242049] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.245937] ORIG_RAX: 0000000000000101 [ 628.245943] RAX: ffffffffffffffda RBX: 00007f2fb5969f60 RCX: 00007f2fb5857049 [ 628.245948] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 628.245953] RBP: 00007f2fb41cc1d0 R08: 0000000000000000 R09: 0000000000000000 01:32:06 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x1, 0x40c082) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/81) 01:32:06 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:06 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 3) 01:32:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20010020) [ 628.245957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.245962] R13: 00007ffdb42eef7f R14: 00007f2fb41cc300 R15: 0000000000022000 [ 628.395680] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 01:32:07 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x1, 0x40c082) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) (async) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/81) 01:32:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:07 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000002acf3f3f8130e85d114c5b4fb5fdca7b2c7130b2dcc4284808bc8bf75de0a1b4ce723b864c98fcdbd67df9dd5c011793ed7a26723ffb23553b4ba6d3936cdf5004b58b1a44abb2a366989b27e0cee5aefd1a423241ffa34bb39ce0edc8e098abb948b32fd88e6a26f8b782ccd573476d8e74b1420d37632e39036d61ad"], 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 628.421943] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.441873] FAULT_INJECTION: forcing a failure. [ 628.441873] name failslab, interval 1, probability 0, space 0, times 0 [ 628.462798] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 01:32:07 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20010020) [ 628.490225] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.505675] CPU: 1 PID: 9953 Comm: syz-executor.3 Not tainted 4.14.273-syzkaller #0 [ 628.513521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.522876] Call Trace: [ 628.525466] dump_stack+0x1b2/0x281 [ 628.529100] should_fail.cold+0x10a/0x149 [ 628.533261] should_failslab+0xd6/0x130 [ 628.537241] kmem_cache_alloc+0x28e/0x3c0 [ 628.541400] get_empty_filp+0x86/0x3f0 [ 628.545289] path_openat+0x84/0x2970 [ 628.549004] ? get_pid_task+0x91/0x130 [ 628.552892] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 628.557736] ? path_lookupat+0x780/0x780 [ 628.561800] ? trace_hardirqs_on+0x10/0x10 [ 628.566044] do_filp_open+0x179/0x3c0 [ 628.569944] ? may_open_dev+0xe0/0xe0 [ 628.573743] ? __alloc_fd+0x1be/0x490 [ 628.577574] ? lock_downgrade+0x740/0x740 [ 628.581718] ? do_raw_spin_unlock+0x164/0x220 [ 628.586219] ? _raw_spin_unlock+0x29/0x40 01:32:07 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20010020) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20010020) (async) [ 628.590363] ? __alloc_fd+0x1be/0x490 [ 628.594170] do_sys_open+0x296/0x410 [ 628.597884] ? filp_open+0x60/0x60 [ 628.601423] ? __do_page_fault+0x159/0xad0 [ 628.605653] ? do_syscall_64+0x4c/0x640 [ 628.609625] ? SyS_open+0x30/0x30 [ 628.613075] do_syscall_64+0x1d5/0x640 [ 628.616961] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 628.622145] RIP: 0033:0x7f2fb5857049 [ 628.625845] RSP: 002b:00007f2fb41cc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 628.633549] RAX: ffffffffffffffda RBX: 00007f2fb5969f60 RCX: 00007f2fb5857049 01:32:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1}, 0x20) [ 628.640817] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 628.648084] RBP: 00007f2fb41cc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 628.655349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.662612] R13: 00007ffdb42eef7f R14: 00007f2fb41cc300 R15: 0000000000022000 [ 628.680027] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.687077] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.694428] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.701310] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.708521] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.716165] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.726918] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.738140] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.745985] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.753009] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.759958] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.767059] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.773849] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.780572] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.787476] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.794494] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.801234] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.808028] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.814854] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.821736] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.828483] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.835293] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.842087] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.848809] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.855652] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.867387] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.874195] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.880872] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.887622] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.894583] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.901261] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.908023] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.914774] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.921513] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.928186] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.935011] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.941768] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.948438] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.955193] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.962044] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.968787] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.975576] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.982337] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.989010] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 628.995740] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.002488] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.009159] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.015878] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.022641] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.029314] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.036089] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.042849] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.049540] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.056291] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.063045] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.069721] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.076457] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.083226] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.089902] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.096642] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.103489] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.110193] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.116941] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.123707] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.130385] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 01:32:07 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:07 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 1) 01:32:07 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x1, 0x40c082) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) (async) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/81) 01:32:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) (async) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1}, 0x20) (async) 01:32:07 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 4) [ 629.137107] hid-generic 0002:0001:0005.005E: unknown main item tag 0x0 [ 629.144831] hid-generic 0002:0001:0005.005E: hidraw0: HID vff.fe Device [syz0] on syz1 [ 629.187917] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.197545] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.204996] FAULT_INJECTION: forcing a failure. [ 629.204996] name failslab, interval 1, probability 0, space 0, times 0 [ 629.213808] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.229930] FAULT_INJECTION: forcing a failure. [ 629.229930] name failslab, interval 1, probability 0, space 0, times 0 [ 629.244149] CPU: 0 PID: 10006 Comm: syz-executor.4 Not tainted 4.14.273-syzkaller #0 [ 629.251986] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.252044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.258891] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.268226] Call Trace: [ 629.268244] dump_stack+0x1b2/0x281 [ 629.268262] should_fail.cold+0x10a/0x149 01:32:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) (async) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1}, 0x20) [ 629.268275] should_failslab+0xd6/0x130 [ 629.268287] kmem_cache_alloc+0x28e/0x3c0 [ 629.268299] getname_flags+0xc8/0x550 [ 629.268311] do_sys_open+0x1ce/0x410 [ 629.268320] ? filp_open+0x60/0x60 [ 629.268333] ? __do_page_fault+0x159/0xad0 [ 629.298988] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.301189] ? do_syscall_64+0x4c/0x640 [ 629.301201] ? SyS_open+0x30/0x30 [ 629.301212] do_syscall_64+0x1d5/0x640 [ 629.301231] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:32:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x101) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2000000000000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000040)) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x6, 0x10000, 0x2, 0x3}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x268041, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, 0x0) [ 629.314296] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.315700] RIP: 0033:0x7f99bc937049 [ 629.315705] RSP: 002b:00007f99bb2ac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 629.315715] RAX: ffffffffffffffda RBX: 00007f99bca49f60 RCX: 00007f99bc937049 [ 629.315721] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 629.315727] RBP: 00007f99bb2ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 629.315732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.315738] R13: 00007ffc6d4fc2ff R14: 00007f99bb2ac300 R15: 0000000000022000 [ 629.391759] CPU: 1 PID: 10014 Comm: syz-executor.3 Not tainted 4.14.273-syzkaller #0 [ 629.399664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.409018] Call Trace: [ 629.411609] dump_stack+0x1b2/0x281 [ 629.415236] should_fail.cold+0x10a/0x149 [ 629.419390] should_failslab+0xd6/0x130 [ 629.423366] kmem_cache_alloc_trace+0x29a/0x3d0 [ 629.428039] apparmor_file_alloc_security+0x129/0x800 [ 629.433240] security_file_alloc+0x66/0xa0 [ 629.437473] ? selinux_is_enabled+0x5/0x50 01:32:08 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) [ 629.441714] get_empty_filp+0x16b/0x3f0 [ 629.445691] path_openat+0x84/0x2970 [ 629.449407] ? _raw_spin_unlock_irq+0x5a/0x80 [ 629.453918] ? finish_task_switch+0x178/0x610 [ 629.458410] ? finish_task_switch+0x14d/0x610 [ 629.462905] ? switch_mm_irqs_off+0x601/0xeb0 [ 629.467403] ? path_lookupat+0x780/0x780 [ 629.471463] ? trace_hardirqs_on+0x10/0x10 [ 629.475705] do_filp_open+0x179/0x3c0 [ 629.479505] ? may_open_dev+0xe0/0xe0 [ 629.483307] ? __alloc_fd+0x1be/0x490 [ 629.487111] ? lock_downgrade+0x740/0x740 [ 629.491259] ? do_raw_spin_unlock+0x164/0x220 [ 629.495761] ? _raw_spin_unlock+0x29/0x40 [ 629.499914] ? __alloc_fd+0x1be/0x490 [ 629.503723] do_sys_open+0x296/0x410 [ 629.507437] ? filp_open+0x60/0x60 [ 629.510976] ? __do_page_fault+0x159/0xad0 [ 629.515206] ? do_syscall_64+0x4c/0x640 [ 629.519181] ? SyS_open+0x30/0x30 [ 629.522634] do_syscall_64+0x1d5/0x640 [ 629.526650] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 629.531836] RIP: 0033:0x7f2fb5857049 01:32:08 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 64) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) 01:32:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 629.535540] RSP: 002b:00007f2fb41cc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 629.543246] RAX: ffffffffffffffda RBX: 00007f2fb5969f60 RCX: 00007f2fb5857049 [ 629.550518] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 629.557872] RBP: 00007f2fb41cc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 629.565232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.572503] R13: 00007ffdb42eef7f R14: 00007f2fb41cc300 R15: 0000000000022000 [ 629.590385] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.603175] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.609879] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.621763] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.628470] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.635271] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.642171] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.652389] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.659140] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.671005] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.677891] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.690088] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.697095] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.704361] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.711160] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.718151] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.725071] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.737468] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.744296] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.754641] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.761514] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.768308] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.777414] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.788901] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.795750] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.802616] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.809291] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.816332] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.823117] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.829791] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.836635] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.843443] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.850124] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.856882] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.863749] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.870429] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.877180] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.883942] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.890621] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.897363] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.904135] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.910795] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.917545] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.924295] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.930982] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.937718] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.944454] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.951144] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.957880] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.964640] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.971370] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.978043] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.984860] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.991612] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 629.998282] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.005027] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.011852] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.018534] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.025349] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.032103] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.038781] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.045527] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.052282] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.058965] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.065717] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.072471] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.079162] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.085899] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 01:32:08 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900010009000000000000000800000000000000a7f9b9551d9837f84d04f1d85a0d5df67ceca8373a3a9fb59244099ada7e248179ea14785ada73a4c2b645484addcd7b4a612c0bdef6e3ca30ab55e45ff38e99ef6253c8c1b6073c64b80516fc9571afc3f74f1ed0a87893a93c5b2d5f6d5a367d1a67d546366d8991e1cf3f36a2dde39cc807d7d653c456c97a461733a00108e38a58d800fc9ef953f66f610c441ac82983f9e4b085f5ce7abdc47e16cf30bffdd451a503b2fffcd60972e826cf0f2933255222781bfd5bd3842272cfa9228f454dbf8e556c8ae5d3c45a946394265ce7963834d42344aef7373caa3c10eb20f72b7010c963781a23a5894d2450e7361a7b14ff848aea93df650a5a5ed3"], 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x101) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2000000000000000, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000040)) (async) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x6, 0x10000, 0x2, 0x3}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x268041, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, 0x0) 01:32:08 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 2) 01:32:08 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) (async) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) (async) 01:32:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:08 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 5) [ 630.092658] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.099329] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.106089] hid-generic 0002:0001:0005.005F: unknown main item tag 0x0 [ 630.113812] hid-generic 0002:0001:0005.005F: hidraw0: HID vff.fe Device [syz0] on syz1 [ 630.164973] FAULT_INJECTION: forcing a failure. [ 630.164973] name failslab, interval 1, probability 0, space 0, times 0 [ 630.182504] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.189217] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.193865] CPU: 0 PID: 10067 Comm: syz-executor.3 Not tainted 4.14.273-syzkaller #0 [ 630.203764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.208731] FAULT_INJECTION: forcing a failure. [ 630.208731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 630.213146] Call Trace: [ 630.227521] dump_stack+0x1b2/0x281 [ 630.231135] should_fail.cold+0x10a/0x149 [ 630.235271] should_failslab+0xd6/0x130 [ 630.239227] kmem_cache_alloc_trace+0x29a/0x3d0 [ 630.243878] ? trace_hardirqs_on+0x10/0x10 [ 630.248097] ? tty_kopen+0x1c0/0x1c0 [ 630.251792] tty_open+0x11a/0x8b0 [ 630.255228] ? lock_acquire+0x170/0x3f0 [ 630.259183] ? tty_kopen+0x1c0/0x1c0 [ 630.262879] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 630.269529] ? tty_kopen+0x1c0/0x1c0 [ 630.273223] chrdev_open+0x23c/0x6d0 [ 630.276939] ? __register_chrdev+0x3d0/0x3d0 [ 630.281330] do_dentry_open+0x44b/0xec0 [ 630.285288] ? __register_chrdev+0x3d0/0x3d0 [ 630.289698] ? __inode_permission+0xcd/0x2f0 [ 630.294091] vfs_open+0x105/0x220 [ 630.297546] path_openat+0x628/0x2970 [ 630.301334] ? path_lookupat+0x780/0x780 [ 630.305376] ? trace_hardirqs_on+0x10/0x10 [ 630.309597] do_filp_open+0x179/0x3c0 [ 630.313377] ? may_open_dev+0xe0/0xe0 [ 630.317174] ? lock_downgrade+0x740/0x740 [ 630.321309] ? do_raw_spin_unlock+0x164/0x220 [ 630.325792] ? _raw_spin_unlock+0x29/0x40 [ 630.329921] ? __alloc_fd+0x1be/0x490 [ 630.333707] do_sys_open+0x296/0x410 [ 630.337410] ? filp_open+0x60/0x60 [ 630.340952] ? __do_page_fault+0x159/0xad0 [ 630.345200] ? do_syscall_64+0x4c/0x640 [ 630.349168] ? SyS_open+0x30/0x30 [ 630.352628] do_syscall_64+0x1d5/0x640 [ 630.356510] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 630.361702] RIP: 0033:0x7f2fb5857049 [ 630.365396] RSP: 002b:00007f2fb41cc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 630.373107] RAX: ffffffffffffffda RBX: 00007f2fb5969f60 RCX: 00007f2fb5857049 [ 630.380376] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 630.387724] RBP: 00007f2fb41cc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.394975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.402226] R13: 00007ffdb42eef7f R14: 00007f2fb41cc300 R15: 0000000000022000 01:32:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 630.409512] CPU: 1 PID: 10072 Comm: syz-executor.4 Not tainted 4.14.273-syzkaller #0 [ 630.417496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.426848] Call Trace: [ 630.429439] dump_stack+0x1b2/0x281 [ 630.433078] should_fail.cold+0x10a/0x149 [ 630.437237] __alloc_pages_nodemask+0x22c/0x2720 [ 630.442005] ? lock_downgrade+0x740/0x740 [ 630.446161] ? __lock_acquire+0x5fc/0x3f20 [ 630.450400] ? get_pid_task+0x91/0x130 [ 630.454288] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 630.459165] ? lock_downgrade+0x740/0x740 01:32:09 executing program 1: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1bd801, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) [ 630.463323] ? get_pid_task+0xb8/0x130 [ 630.467217] ? proc_fail_nth_write+0x7b/0x180 [ 630.471719] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 630.476658] cache_grow_begin+0x91/0x700 [ 630.480724] ? fs_reclaim_release+0xd0/0x110 [ 630.485133] ? check_preemption_disabled+0x35/0x240 [ 630.490152] cache_alloc_refill+0x273/0x350 [ 630.494480] kmem_cache_alloc+0x333/0x3c0 [ 630.498636] getname_flags+0xc8/0x550 [ 630.502436] do_sys_open+0x1ce/0x410 [ 630.506148] ? filp_open+0x60/0x60 [ 630.509687] ? __do_page_fault+0x159/0xad0 01:32:09 executing program 1: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1bd801, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) [ 630.513921] ? do_syscall_64+0x4c/0x640 [ 630.517897] ? SyS_open+0x30/0x30 [ 630.521350] do_syscall_64+0x1d5/0x640 [ 630.525236] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 630.530418] RIP: 0033:0x7f99bc937049 [ 630.534121] RSP: 002b:00007f99bb2ac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 630.541826] RAX: ffffffffffffffda RBX: 00007f99bca49f60 RCX: 00007f99bc937049 [ 630.549090] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 630.556359] RBP: 00007f99bb2ac1d0 R08: 0000000000000000 R09: 0000000000000000 01:32:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:09 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 6) [ 630.563625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.570894] R13: 00007ffc6d4fc2ff R14: 00007f99bb2ac300 R15: 0000000000022000 [ 630.587083] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.601046] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.608258] FAULT_INJECTION: forcing a failure. 01:32:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x101) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2000000000000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000040)) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x6, 0x10000, 0x2, 0x3}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x268041, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x101) (async) syz_open_dev$sndmidi(&(0x7f0000000000), 0x2000000000000000, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000040)) (async) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x6, 0x10000, 0x2, 0x3}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x268041, 0x0) (async) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, 0x0) (async) [ 630.608258] name failslab, interval 1, probability 0, space 0, times 0 [ 630.625224] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.633528] CPU: 1 PID: 10091 Comm: syz-executor.3 Not tainted 4.14.273-syzkaller #0 [ 630.641421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.650774] Call Trace: [ 630.653366] dump_stack+0x1b2/0x281 [ 630.656999] should_fail.cold+0x10a/0x149 [ 630.661151] should_failslab+0xd6/0x130 [ 630.665128] kmem_cache_alloc_trace+0x29a/0x3d0 [ 630.669805] alloc_tty_struct+0x85/0x8c0 [ 630.673874] ? __do_SAK+0x30/0x30 [ 630.677322] ? tty_open+0x11a/0x8b0 [ 630.680968] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 630.686421] tty_init_dev.part.0+0x1e/0x400 [ 630.691524] tty_open+0x669/0x8b0 [ 630.694980] ? tty_kopen+0x1c0/0x1c0 [ 630.698697] ? tty_kopen+0x1c0/0x1c0 [ 630.702408] chrdev_open+0x23c/0x6d0 [ 630.706120] ? __register_chrdev+0x3d0/0x3d0 [ 630.710530] do_dentry_open+0x44b/0xec0 [ 630.714501] ? __register_chrdev+0x3d0/0x3d0 [ 630.718908] ? __inode_permission+0xcd/0x2f0 [ 630.723318] vfs_open+0x105/0x220 [ 630.726785] path_openat+0x628/0x2970 [ 630.730680] ? path_lookupat+0x780/0x780 [ 630.734741] ? trace_hardirqs_on+0x10/0x10 [ 630.738980] do_filp_open+0x179/0x3c0 [ 630.742783] ? may_open_dev+0xe0/0xe0 [ 630.746664] ? lock_downgrade+0x740/0x740 [ 630.750799] ? do_raw_spin_unlock+0x164/0x220 [ 630.755275] ? _raw_spin_unlock+0x29/0x40 [ 630.759407] ? __alloc_fd+0x1be/0x490 [ 630.763204] do_sys_open+0x296/0x410 [ 630.766905] ? filp_open+0x60/0x60 [ 630.770486] ? __do_page_fault+0x159/0xad0 [ 630.774707] ? do_syscall_64+0x4c/0x640 [ 630.778674] ? SyS_open+0x30/0x30 [ 630.782125] do_syscall_64+0x1d5/0x640 [ 630.786022] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 630.791195] RIP: 0033:0x7f2fb5857049 [ 630.794895] RSP: 002b:00007f2fb41cc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 630.802601] RAX: ffffffffffffffda RBX: 00007f2fb5969f60 RCX: 00007f2fb5857049 [ 630.809864] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 630.817119] RBP: 00007f2fb41cc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.824388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.831644] R13: 00007ffdb42eef7f R14: 00007f2fb41cc300 R15: 0000000000022000 [ 630.839523] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.846351] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.853161] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.859918] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.866747] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.873724] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.880480] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.887290] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.894133] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.909227] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.916174] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.926249] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.934740] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.946262] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.954871] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.965434] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.980841] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 630.989266] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.003033] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.016732] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.023644] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.030314] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.037059] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.043844] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.050521] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.057265] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.064190] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.070870] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.077621] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.084358] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.091022] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.097939] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.104743] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.111505] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.118181] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.125127] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.131886] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.138556] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.145267] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.152015] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.158691] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.165420] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.172183] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.178867] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.185649] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.192432] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.199109] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.205857] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.212604] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.219291] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.226041] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.232802] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.239490] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.246222] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.252995] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.259673] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.266416] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.273168] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.279843] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.286583] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.293362] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.300062] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.306802] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.313575] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.320249] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.327011] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.333777] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.340531] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.347528] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.354293] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.360967] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 01:32:09 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:09 executing program 1: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1bd801, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) 01:32:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:09 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 3) 01:32:09 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040), 0x3f, 0x42) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x101) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 01:32:09 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 7) [ 631.367700] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.374473] hid-generic 0002:0001:0005.0060: unknown main item tag 0x0 [ 631.382400] hid-generic 0002:0001:0005.0060: hidraw0: HID vff.fe Device [syz0] on syz1 01:32:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) [ 631.428939] FAULT_INJECTION: forcing a failure. [ 631.428939] name failslab, interval 1, probability 0, space 0, times 0 [ 631.452361] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 631.459215] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 631.460548] CPU: 1 PID: 10137 Comm: syz-executor.4 Not tainted 4.14.273-syzkaller #0 [ 631.473848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.477067] FAULT_INJECTION: forcing a failure. [ 631.477067] name failslab, interval 1, probability 0, space 0, times 0 [ 631.483217] Call Trace: [ 631.483234] dump_stack+0x1b2/0x281 [ 631.483249] should_fail.cold+0x10a/0x149 [ 631.483261] should_failslab+0xd6/0x130 [ 631.483272] kmem_cache_alloc+0x28e/0x3c0 [ 631.483284] get_empty_filp+0x86/0x3f0 [ 631.483294] path_openat+0x84/0x2970 [ 631.483303] ? get_pid_task+0x91/0x130 [ 631.483312] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 631.483327] ? path_lookupat+0x780/0x780 [ 631.497219] nla_parse: 14 callbacks suppressed [ 631.497225] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 631.500778] ? trace_hardirqs_on+0x10/0x10 [ 631.500798] do_filp_open+0x179/0x3c0 [ 631.500808] ? may_open_dev+0xe0/0xe0 [ 631.500819] ? __alloc_fd+0x1be/0x490 [ 631.506240] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 631.508924] ? lock_downgrade+0x740/0x740 [ 631.508937] ? do_raw_spin_unlock+0x164/0x220 01:32:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x20) (async) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) [ 631.508946] ? _raw_spin_unlock+0x29/0x40 [ 631.508956] ? __alloc_fd+0x1be/0x490 [ 631.524295] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 631.524538] do_sys_open+0x296/0x410 [ 631.537272] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 631.537970] ? filp_open+0x60/0x60 [ 631.555500] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 631.558285] ? __do_page_fault+0x159/0xad0 [ 631.558297] ? do_syscall_64+0x4c/0x640 [ 631.558305] ? SyS_open+0x30/0x30 [ 631.558315] do_syscall_64+0x1d5/0x640 01:32:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) (async) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x20) (async) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) (async) [ 631.568810] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 631.572889] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 631.572899] RIP: 0033:0x7f99bc937049 [ 631.572904] RSP: 002b:00007f99bb2ac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 631.572912] RAX: ffffffffffffffda RBX: 00007f99bca49f60 RCX: 00007f99bc937049 [ 631.572918] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 631.572923] RBP: 00007f99bb2ac1d0 R08: 0000000000000000 R09: 0000000000000000 01:32:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x3}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) 01:32:10 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040), 0x3f, 0x42) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x101) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 01:32:10 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 4) [ 631.572927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.572933] R13: 00007ffc6d4fc2ff R14: 00007f99bb2ac300 R15: 0000000000022000 [ 631.697809] CPU: 0 PID: 10141 Comm: syz-executor.3 Not tainted 4.14.273-syzkaller #0 [ 631.705715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.715066] Call Trace: [ 631.717690] dump_stack+0x1b2/0x281 [ 631.721322] should_fail.cold+0x10a/0x149 [ 631.725485] should_failslab+0xd6/0x130 [ 631.729474] kmem_cache_alloc_node_trace+0x25a/0x400 [ 631.734580] __get_vm_area_node+0xed/0x340 [ 631.738816] ? n_tty_open+0x16/0x160 [ 631.742531] vzalloc+0x98/0x150 [ 631.745812] ? n_tty_open+0x16/0x160 [ 631.749523] n_tty_open+0x16/0x160 [ 631.753061] ? n_tty_set_termios+0xcc0/0xcc0 [ 631.755488] FAULT_INJECTION: forcing a failure. [ 631.755488] name failslab, interval 1, probability 0, space 0, times 0 [ 631.757468] tty_ldisc_open+0x6c/0xb0 [ 631.757480] tty_ldisc_setup+0x43/0xf0 [ 631.757493] tty_init_dev.part.0+0x1a7/0x400 [ 631.757502] tty_open+0x669/0x8b0 [ 631.757516] ? tty_kopen+0x1c0/0x1c0 [ 631.787896] ? tty_kopen+0x1c0/0x1c0 [ 631.791592] chrdev_open+0x23c/0x6d0 [ 631.795305] ? __register_chrdev+0x3d0/0x3d0 [ 631.799698] do_dentry_open+0x44b/0xec0 [ 631.803655] ? __register_chrdev+0x3d0/0x3d0 [ 631.808046] ? __inode_permission+0xcd/0x2f0 [ 631.812523] vfs_open+0x105/0x220 [ 631.816050] path_openat+0x628/0x2970 [ 631.819839] ? path_lookupat+0x780/0x780 [ 631.823896] ? trace_hardirqs_on+0x10/0x10 [ 631.828295] do_filp_open+0x179/0x3c0 [ 631.832077] ? may_open_dev+0xe0/0xe0 [ 631.835863] ? lock_downgrade+0x740/0x740 [ 631.839993] ? do_raw_spin_unlock+0x164/0x220 [ 631.844471] ? _raw_spin_unlock+0x29/0x40 [ 631.848602] ? __alloc_fd+0x1be/0x490 [ 631.852403] do_sys_open+0x296/0x410 [ 631.856100] ? filp_open+0x60/0x60 [ 631.859648] ? __do_page_fault+0x159/0xad0 [ 631.863876] ? do_syscall_64+0x4c/0x640 [ 631.867838] ? SyS_open+0x30/0x30 [ 631.871279] do_syscall_64+0x1d5/0x640 [ 631.875159] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 631.880350] RIP: 0033:0x7f2fb5857049 [ 631.884043] RSP: 002b:00007f2fb41cc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 631.891738] RAX: ffffffffffffffda RBX: 00007f2fb5969f60 RCX: 00007f2fb5857049 [ 631.898987] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 631.906251] RBP: 00007f2fb41cc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.913501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.920838] R13: 00007ffdb42eef7f R14: 00007f2fb41cc300 R15: 0000000000022000 [ 631.928105] CPU: 1 PID: 10164 Comm: syz-executor.4 Not tainted 4.14.273-syzkaller #0 [ 631.935996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.945355] Call Trace: [ 631.947952] dump_stack+0x1b2/0x281 [ 631.951587] should_fail.cold+0x10a/0x149 [ 631.955735] should_failslab+0xd6/0x130 [ 631.959711] kmem_cache_alloc_trace+0x29a/0x3d0 [ 631.964386] apparmor_file_alloc_security+0x129/0x800 [ 631.969586] security_file_alloc+0x66/0xa0 [ 631.973822] ? selinux_is_enabled+0x5/0x50 [ 631.978058] get_empty_filp+0x16b/0x3f0 [ 631.982038] path_openat+0x84/0x2970 [ 631.985754] ? get_pid_task+0x91/0x130 [ 631.989643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 631.994490] ? path_lookupat+0x780/0x780 [ 631.998554] ? trace_hardirqs_on+0x10/0x10 [ 632.000770] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.002789] do_filp_open+0x179/0x3c0 [ 632.002798] ? may_open_dev+0xe0/0xe0 [ 632.002807] ? __alloc_fd+0x1be/0x490 [ 632.002821] ? lock_downgrade+0x740/0x740 [ 632.002831] ? do_raw_spin_unlock+0x164/0x220 [ 632.002842] ? _raw_spin_unlock+0x29/0x40 [ 632.009524] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.013296] ? __alloc_fd+0x1be/0x490 [ 632.013311] do_sys_open+0x296/0x410 [ 632.013321] ? filp_open+0x60/0x60 [ 632.013332] ? __do_page_fault+0x159/0xad0 [ 632.013342] ? do_syscall_64+0x4c/0x640 [ 632.017142] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.020915] ? SyS_open+0x30/0x30 [ 632.025095] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.029594] do_syscall_64+0x1d5/0x640 [ 632.033761] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.040365] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 632.044186] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.047838] RIP: 0033:0x7f99bc937049 [ 632.067524] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.069702] RSP: 002b:00007f99bb2ac168 EFLAGS: 00000246 [ 632.091167] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.092054] ORIG_RAX: 0000000000000101 [ 632.098739] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.102429] RAX: ffffffffffffffda RBX: 00007f99bca49f60 RCX: 00007f99bc937049 [ 632.102434] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 632.102439] RBP: 00007f99bb2ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.102443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.102447] R13: 00007ffc6d4fc2ff R14: 00007f99bb2ac300 R15: 0000000000022000 [ 632.170565] syz-executor.3: vmalloc: allocation failure: 9088 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 632.182182] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 632.187581] CPU: 0 PID: 10141 Comm: syz-executor.3 Not tainted 4.14.273-syzkaller #0 [ 632.197464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.206847] Call Trace: [ 632.209507] dump_stack+0x1b2/0x281 [ 632.213128] warn_alloc.cold+0x96/0x1cc [ 632.217095] ? zone_watermark_ok_safe+0x220/0x220 [ 632.221928] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 632.227373] ? __get_vm_area_node+0xed/0x340 [ 632.231783] ? __get_vm_area_node+0x27d/0x340 [ 632.236366] vzalloc+0x122/0x150 [ 632.239733] n_tty_open+0x16/0x160 [ 632.243269] ? n_tty_set_termios+0xcc0/0xcc0 [ 632.247667] tty_ldisc_open+0x6c/0xb0 [ 632.251453] tty_ldisc_setup+0x43/0xf0 [ 632.255428] tty_init_dev.part.0+0x1a7/0x400 [ 632.259819] tty_open+0x669/0x8b0 [ 632.263252] ? tty_kopen+0x1c0/0x1c0 [ 632.266948] ? tty_kopen+0x1c0/0x1c0 [ 632.270657] chrdev_open+0x23c/0x6d0 [ 632.274661] ? __register_chrdev+0x3d0/0x3d0 [ 632.279071] do_dentry_open+0x44b/0xec0 [ 632.283050] ? __register_chrdev+0x3d0/0x3d0 [ 632.287447] ? __inode_permission+0xcd/0x2f0 [ 632.291845] vfs_open+0x105/0x220 [ 632.295293] path_openat+0x628/0x2970 [ 632.299094] ? path_lookupat+0x780/0x780 [ 632.303136] ? trace_hardirqs_on+0x10/0x10 [ 632.307369] do_filp_open+0x179/0x3c0 [ 632.311177] ? may_open_dev+0xe0/0xe0 [ 632.314962] ? lock_downgrade+0x740/0x740 [ 632.319092] ? do_raw_spin_unlock+0x164/0x220 [ 632.323565] ? _raw_spin_unlock+0x29/0x40 [ 632.327713] ? __alloc_fd+0x1be/0x490 [ 632.331501] do_sys_open+0x296/0x410 [ 632.335267] ? filp_open+0x60/0x60 [ 632.338790] ? __do_page_fault+0x159/0xad0 [ 632.343015] ? do_syscall_64+0x4c/0x640 [ 632.346968] ? SyS_open+0x30/0x30 [ 632.350403] do_syscall_64+0x1d5/0x640 [ 632.354306] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 632.359477] RIP: 0033:0x7f2fb5857049 [ 632.363166] RSP: 002b:00007f2fb41cc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 632.370852] RAX: ffffffffffffffda RBX: 00007f2fb5969f60 RCX: 00007f2fb5857049 [ 632.378099] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 632.385348] RBP: 00007f2fb41cc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.392611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.399861] R13: 00007ffdb42eef7f R14: 00007f2fb41cc300 R15: 0000000000022000 [ 632.408584] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.415907] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.422919] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.429736] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.436627] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.443552] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.445232] Mem-Info: [ 632.450372] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.458473] active_anon:20150 inactive_anon:6746 isolated_anon:0 [ 632.458473] active_file:5751 inactive_file:10350 isolated_file:0 [ 632.458473] unevictable:0 dirty:162 writeback:0 unstable:0 [ 632.458473] slab_reclaimable:19970 slab_unreclaimable:126789 [ 632.458473] mapped:30455 shmem:7083 pagetables:584 bounce:0 [ 632.458473] free:1478457 free_pcp:356 free_cma:0 [ 632.459518] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.497369] Node 0 active_anon:80600kB inactive_anon:26984kB active_file:22888kB inactive_file:41400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121820kB dirty:648kB writeback:0kB shmem:28332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 632.500570] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.534963] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 632.535658] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.567686] Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.568272] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.600403] lowmem_reserve[]: [ 632.601147] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.601151] 0 2717 [ 632.604294] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.610959] 2718 [ 632.613256] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.613269] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.613280] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.613292] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.613303] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.613315] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.613327] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.613339] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.613351] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.613366] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.631279] 2718 [ 632.639664] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.651317] 2718 [ 632.659365] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.669109] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.675721] Node 0 DMA32 free:1857472kB min:36196kB low:45244kB high:54292kB active_anon:80600kB inactive_anon:26984kB active_file:22888kB inactive_file:41400kB unevictable:0kB writepending:648kB present:3129332kB managed:2787996kB mlocked:0kB kernel_stack:7328kB pagetables:2336kB bounce:0kB free_pcp:1432kB local_pcp:724kB free_cma:0kB [ 632.686177] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.689219] lowmem_reserve[]: [ 632.691412] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.691425] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.691436] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.704599] 0 [ 632.710563] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.718197] 0 [ 632.743731] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.743744] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.743757] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.743769] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.743783] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.761275] 0 [ 632.767009] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.780082] 0 [ 632.782172] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.782186] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.782198] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.782211] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.782222] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.782234] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.784226] 0 [ 632.790723] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.817565] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.819336] Node 0 [ 632.831137] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.835506] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.845183] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.848257] lowmem_reserve[]: [ 632.859238] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.861776] 0 [ 632.873663] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.877293] 0 [ 632.884019] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.885662] 0 [ 632.898897] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.917542] 0 [ 632.929704] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.934115] 0 [ 632.937655] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.949862] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.951300] Node 1 [ 632.960783] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.962255] Normal free:4041064kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.974194] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.977101] lowmem_reserve[]: [ 632.985164] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 632.985911] 0 [ 632.998420] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 633.020036] 0 [ 633.032815] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 633.036714] 0 [ 633.038251] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 633.047443] 0 [ 633.057227] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 [ 633.063616] 0 [ 633.066618] hid-generic 0002:0001:0005.0061: unknown main item tag 0x0 01:32:11 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x141) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/78, 0x4e, 0x2, 0x1, 0x5, 0xfffe, 0x1}}, 0x120) 01:32:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x3}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) [ 633.075595] hid-generic 0002:0001:0005.0061: hidraw0: HID vff.fe Device [syz0] on syz1 [ 633.085420] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 633.119483] Node 0 DMA32: 3857*4kB (UME) 253*8kB (UME) 33*16kB (UME) 7*32kB (UME) 49*64kB (U) 40*128kB (U) 17*256kB (UM) 6*512kB (UME) 1*1024kB (U) 4*2048kB (ME) 443*4096kB (M) = 1857628kB [ 633.149533] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.152363] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 633.170717] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.171781] Node 1 Normal: 76*4kB (UME) 385*8kB (UM) 283*16kB (UME) 86*32kB (UME) 29*64kB (UME) 15*128kB (UM) 11*256kB (UM) 3*512kB (U) 2*1024kB (UM) 5*2048kB (UME) 979*4096kB (M) = 4041064kB [ 633.185315] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.203368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.214858] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.216436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 633.223964] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.230637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.239445] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.250490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 633.255617] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.261970] 23194 total pagecache pages [ 633.271247] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.276298] 0 pages in swap cache [ 633.281118] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.282893] Swap cache stats: add 0, delete 0, find 0/0 [ 633.291206] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.298691] Free swap = 0kB [ 633.303436] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.304691] Total swap = 0kB [ 633.313310] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.318227] 2097051 pages RAM [ 633.323228] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.324551] 0 pages HighMem/MovableOnly [ 633.333088] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.338969] 363894 pages reserved 01:32:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) 01:32:11 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$midi(&(0x7f0000000040), 0x3f, 0x42) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x101) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 01:32:11 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) (fail_nth: 5) 01:32:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x3}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) [ 633.344857] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.345582] 0 pages cma reserved [ 633.354060] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.356703] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 633.363406] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.377296] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 01:32:11 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f0000000380)=0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f00000001c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg(r1, &(0x7f0000000080)={0x1, {&(0x7f0000000000)=""/47, 0x2f, &(0x7f0000000040)=""/4, 0x1, 0x3}}, 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4e180, 0x0) write$vhost_msg(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000100)=""/111, 0x6f, &(0x7f0000000240)=""/144, 0x3, 0x1}}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x108080}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="60e304ae5744ed0000", @ANYRES16=r2, @ANYBLOB="00042abd7000fddbdf250100000008000300070000002800018008000700", @ANYRES32=0x0, @ANYBLOB="05000200030000001400040000000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) [ 633.401098] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.407821] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 01:32:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x3, 0x4, 0x43, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x7820, 0x1, 0x6b}}) 01:32:12 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x3ff, 0x18, "c320bcbda23ebaeb"}) [ 633.456801] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.479092] FAULT_INJECTION: forcing a failure. [ 633.479092] name failslab, interval 1, probability 0, space 0, times 0 [ 633.492004] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.498378] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:32:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x20) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x3, 0x4, 0x43, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x7820, 0x1, 0x6b}}) (rerun: 64) 01:32:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000540)=0x8ee1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00f8d02d7000fbed694797"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01802ab581000008001700"/21, @ANYRES32=r4], 0x3c}}, 0x0) [ 633.498791] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.531571] CPU: 0 PID: 10202 Comm: syz-executor.4 Not tainted 4.14.273-syzkaller #0 [ 633.539485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.548928] Call Trace: [ 633.551524] dump_stack+0x1b2/0x281 01:32:12 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x3ff, 0x18, "c320bcbda23ebaeb"}) [ 633.555272] should_fail.cold+0x10a/0x149 [ 633.559602] should_failslab+0xd6/0x130 [ 633.563585] kmem_cache_alloc_trace+0x29a/0x3d0 [ 633.568265] ? trace_hardirqs_on+0x10/0x10 [ 633.572522] ? tty_kopen+0x1c0/0x1c0 [ 633.576235] tty_open+0x11a/0x8b0 [ 633.579736] ? lock_acquire+0x170/0x3f0 [ 633.583721] ? tty_kopen+0x1c0/0x1c0 [ 633.587432] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 633.594322] ? tty_kopen+0x1c0/0x1c0 [ 633.598035] chrdev_open+0x23c/0x6d0 [ 633.601840] ? __register_chrdev+0x3d0/0x3d0 [ 633.605940] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.606250] do_dentry_open+0x44b/0xec0 [ 633.606263] ? __register_chrdev+0x3d0/0x3d0 [ 633.623194] ? __inode_permission+0xcd/0x2f0 [ 633.627607] vfs_open+0x105/0x220 [ 633.631063] path_openat+0x628/0x2970 [ 633.634962] ? path_lookupat+0x780/0x780 [ 633.639032] ? trace_hardirqs_on+0x10/0x10 [ 633.642584] kasan: CONFIG_KASAN_INLINE enabled [ 633.643271] do_filp_open+0x179/0x3c0 [ 633.643283] ? may_open_dev+0xe0/0xe0 [ 633.643299] ? lock_downgrade+0x740/0x740 [ 633.643314] ? do_raw_spin_unlock+0x164/0x220 [ 633.657189] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 633.659721] ? _raw_spin_unlock+0x29/0x40 [ 633.659732] ? __alloc_fd+0x1be/0x490 [ 633.659749] do_sys_open+0x296/0x410 [ 633.659760] ? filp_open+0x60/0x60 [ 633.659774] ? __do_page_fault+0x159/0xad0 [ 633.668582] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 633.671688] ? do_syscall_64+0x4c/0x640 [ 633.675896] Modules linked in: [ 633.679682] ? SyS_open+0x30/0x30 [ 633.687330] do_syscall_64+0x1d5/0x640 [ 633.691535] CPU: 1 PID: 10203 Comm: syz-executor.3 Not tainted 4.14.273-syzkaller #0 [ 633.697745] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 633.701683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.704852] RIP: 0033:0x7f99bc937049 [ 633.708275] task: ffff8880a60421c0 task.stack: ffff8880924f8000 [ 633.712134] RSP: 002b:00007f99bb2ac168 EFLAGS: 00000246 [ 633.720080] RIP: 0010:vhost_chr_write_iter+0x873/0x1100 [ 633.725244] ORIG_RAX: 0000000000000101 [ 633.734674] RSP: 0018:ffff8880924ffc00 EFLAGS: 00010246 [ 633.738369] RAX: ffffffffffffffda RBX: 00007f99bca49f60 RCX: 00007f99bc937049 [ 633.749735] RDX: 000000000004e180 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 633.755073] RAX: dffffc0000000000 RBX: ffff888088d64a40 RCX: 0000000000000000 [ 633.759045] RBP: 00007f99bb2ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.764385] RDX: 0000000000000002 RSI: ffffffff857ec415 RDI: ffff888088d64b00 [ 633.771731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.778978] RBP: ffffed10111ac959 R08: 0000000000000000 R09: 0000000000040693 [ 633.786238] R13: 00007ffc6d4fc2ff R14: 00007f99bb2ac300 R15: 0000000000022000 [ 633.793497] R10: ffff8880a6042a98 R11: ffff8880a60421c0 R12: 0000000000000002 [ 633.811009] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.815256] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff1101249ff87 [ 633.839302] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.843676] FS: 00007f2fb41cc700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 633.843681] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.843685] CR2: 00007f48c073d998 CR3: 000000009c2bf000 CR4: 00000000003406e0 [ 633.843693] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 633.843697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 633.843700] Call Trace: [ 633.843718] ? log_write_hva+0x310/0x310 [ 633.850377] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.858575] ? lock_downgrade+0x740/0x740 [ 633.858585] ? iov_iter_init+0xa6/0x1c0 [ 633.858594] __vfs_write+0x44c/0x630 [ 633.858603] ? kernel_read+0x110/0x110 [ 633.858616] ? rw_verify_area+0xe1/0x2a0 [ 633.864509] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.871739] vfs_write+0x17f/0x4d0 [ 633.871749] SyS_write+0xf2/0x210 [ 633.871759] ? SyS_read+0x210/0x210 [ 633.879026] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.886266] ? do_syscall_64+0x4c/0x640 [ 633.886273] ? SyS_read+0x210/0x210 [ 633.886280] do_syscall_64+0x1d5/0x640 [ 633.886293] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 633.888870] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.892892] RIP: 0033:0x7f2fb5857049 [ 633.892896] RSP: 002b:00007f2fb41cc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 633.892904] RAX: ffffffffffffffda RBX: 00007f2fb5969f60 RCX: 00007f2fb5857049 [ 633.892908] RDX: 0000000000000048 RSI: 0000000020000080 RDI: 0000000000000003 [ 633.892914] RBP: 00007f2fb58b108d R08: 0000000000000000 R09: 0000000000000000 [ 633.899572] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.903683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.903688] R13: 00007ffdb42eef7f R14: 00007f2fb41cc300 R15: 0000000000022000 [ 633.903696] Code: ff [ 633.907683] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.911370] df 48 89 f9 48 c1 e9 03 80 3c [ 633.915284] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.919301] 01 [ 633.925980] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.929454] 00 [ 633.932923] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.936478] 0f [ 633.943148] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.947064] 85 [ 633.950688] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.954542] c6 06 00 00 4c 8b ab c0 00 00 [ 633.959834] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.966459] 00 48 b8 00 00 00 00 00 fc ff df 4c [ 633.970190] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.977865] 89 e9 48 c1 e9 03 <80> 3c 01 00 [ 633.985171] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 633.992395] 0f 85 8f 06 00 00 49 8b 6d 00 48 85 ed 0f 84 e4 03 [ 633.992458] RIP: vhost_chr_write_iter+0x873/0x1100 RSP: ffff8880924ffc00 [ 634.043626] ---[ end trace fde9aa04a1e761a0 ]--- [ 634.058805] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 634.067938] Kernel panic - not syncing: Fatal exception [ 634.070053] hid-generic 0002:0001:0005.0062: unknown main item tag 0x0 [ 634.075715] Kernel Offset: disabled [ 634.149183] Rebooting in 86400 seconds..