8f7a589b97b9e588a399be9df4b12fd552c48c3a5a277d89c4c441e3a91f98ace46e963870343d6ed2209cac0ae3b756abf7ab3cbec88f3fb91ab19ceb03155e2e51ea7dbca6c242a57ff59caf3bc37e06750b057baea66fcebe23b84a2c30ffddeac6a6ce39e0b832e3e268d8d24d1872b25e7849fef56e6995bbb40d55b5cde292c6bab0e37c049df4cddc3137f92de911f348a79ed26e83cd36a68ff5b4bc903c9fb0f8fec73a32c1c65a17083c162dadd4f0c338e65d9197e6e58314c98a26e6cb1e8cd7d36fee6a435b846c0f53964d5c1f9ba3f5200c9f98566e6026e97caee32aea12b7d16087ffd030000000000000000000000000043a59827bfbdffd5401f0e0abc73168d499fcb81877c3f232c13857bcce42b59002e0e1d0c7415fe8ca20447fd1e2ed74bb6e57e589890271e7f496c27b8d241f0d38408e92991b5103d54b6359c0e68236cdacf31992d60b1e05a3b5e47f5f51ad633f78bd6cd6c2911ed8f3308ea91ed936b4fafab257d41e70bd5de263e97c905cf87094fd9789624be53dfa658f22a7940a98c57bfdcfbf8e9ab5a71f3840c100390ce406bd57e754e9b3656308028ab34805c924f35ffadbfa5374b23293a44a884a4ae229908b02a3223b3fa32c7d5ad5303c30fb2588a2fd41030904a4b70db15024dee61b130d8757d2879a85d188dcaf71a38dec85a1891b6366617b2c7005065640a1ee27dca7bdd8f7e4478e30c0f2e57b64bc4ba5011391a986e530595530df00d14ac15d901d5b3c529ba36e7dcddc379496d997a61dac1c191f440297af4e51892da0d980215bebc3eeeed"], 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000340)=r7) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 00:06:03 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init() creat(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x80000002) read(r0, 0x0, 0x3ae) close(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:06:03 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init() creat(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x80000002) read(r0, 0x0, 0x3ae) close(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:06:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r3, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r3, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000500), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80fd88f509538e0fd01770646bc16b7fcf25bcd2c6f107ea1d322f28c38dacabc496cf02ce86976a", 0x4e, 0xfffffffffffffffa) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r7, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef12b8f3fee7bbdd7b0734bfbc0aa67355e490efeda765eebd39bb75"], 0x6c) sendfile(r2, r7, 0x0, 0xa5cc554) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f00000004c0)=0x14) 00:06:03 executing program 0: r0 = socket$packet(0x11, 0x1000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 00:06:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xfffffffffffffd8b, 0x0, 0x0, 0x0) 00:06:03 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init() creat(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x80000002) read(r0, 0x0, 0x3ae) close(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:06:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xfffffffffffffd8b, 0x0, 0x0, 0x0) 00:06:03 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init() creat(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x80000002) read(r0, 0x0, 0x3ae) close(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 637.810458] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) [ 637.931840] audit: type=1400 audit(1544313963.908:239): avc: denied { create } for pid=18010 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 638.168048] audit: type=1400 audit(1544313964.148:240): avc: denied { write } for pid=18010 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:06:04 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init() creat(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x80000002) read(r0, 0x0, 0x3ae) close(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:06:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003e40)=[{{&(0x7f0000000440)=@nfc_llcp, 0x1ca, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x11ba}], 0x1, &(0x7f0000001740)=""/194, 0xc2}}], 0x4000000000003f6, 0x500, 0x0) write(r2, &(0x7f0000000140)="a5", 0x1) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) close(r1) [ 638.888150] audit: type=1400 audit(1544313964.868:241): avc: denied { read } for pid=18010 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:06:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 639.575949] binder: 18049:18051 Acquire 1 refcount change on invalid ref 0 ret -22 [ 639.639910] binder: 18049:18053 unknown command 14 [ 639.682030] binder: 18049:18053 ioctl c0306201 20000040 returned -22 [ 639.682373] binder: 18049:18051 unknown command 0 [ 639.682379] binder: 18049:18051 ioctl c0306201 2000dfd0 returned -22 00:06:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r4, 0x0, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x0, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000340)=r7) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 00:06:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003e40)=[{{&(0x7f0000000440)=@nfc_llcp, 0x1ca, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x11ba}], 0x1, &(0x7f0000001740)=""/194, 0xc2}}], 0x4000000000003f6, 0x500, 0x0) write(r2, &(0x7f0000000140)="a5", 0x1) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) close(r1) 00:06:06 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f00000003c0)=0x4) 00:06:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) recvmmsg(r2, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r3}) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001a002102000000000000000000000000"], 0x1}}, 0x0) 00:06:06 executing program 0: r0 = socket$packet(0x11, 0x1000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 00:06:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 00:06:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003e40)=[{{&(0x7f0000000440)=@nfc_llcp, 0x1ca, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x11ba}], 0x1, &(0x7f0000001740)=""/194, 0xc2}}], 0x4000000000003f6, 0x500, 0x0) write(r2, &(0x7f0000000140)="a5", 0x1) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) close(r1) 00:06:06 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$netlink(r0, &(0x7f00000006c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xffffffffffffff84) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000680)=r1) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400), 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x8000009) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000240)={0xffffffffffffe31b, 0xffff, 0x6}) r7 = getpgrp(r2) capget(&(0x7f00000001c0)={0x20080522, r7}, &(0x7f0000000200)={0x9, 0x81, 0xffffffff, 0x6}) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000300)) r8 = socket$inet6(0xa, 0x400000000001, 0x100000000000000) r9 = dup(r8) fsync(r6) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000005c0)={{0xa, 0x4e20, 0x9, @ipv4={[], [], @loopback}, 0x2}, {0xa, 0x4e25, 0xa, @loopback, 0x4}, 0x400, [0x6, 0xc5, 0x7, 0x12b, 0xfffffffffffffbff]}, 0x5c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) write$binfmt_elf64(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xaee) setfsgid(r10) setsockopt$inet6_tcp_int(r9, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x200000010) ftruncate(r11, 0x2007fff) sendfile(r9, r11, &(0x7f0000d83ff8), 0x8000fffffffe) [ 640.726820] binder: 18063:18068 Acquire 1 refcount change on invalid ref 0 ret -22 [ 640.783439] binder: 18063:18068 unknown command 14 [ 640.802622] binder: 18063:18068 ioctl c0306201 20000040 returned -22 [ 640.838590] binder: 18063:18074 unknown command 0 [ 640.880522] binder: 18063:18074 ioctl c0306201 2000dfd0 returned -22 00:06:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 00:06:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x581540, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x20011, r0, 0x0) [ 641.462609] audit: type=1400 audit(1544313967.438:242): avc: denied { create } for pid=18073 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:06:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003e40)=[{{&(0x7f0000000440)=@nfc_llcp, 0x1ca, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x11ba}], 0x1, &(0x7f0000001740)=""/194, 0xc2}}], 0x4000000000003f6, 0x500, 0x0) write(r2, &(0x7f0000000140)="a5", 0x1) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) close(r1) [ 641.691080] audit: type=1400 audit(1544313967.668:243): avc: denied { write } for pid=18073 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 641.966495] binder: 18089:18091 Acquire 1 refcount change on invalid ref 0 ret -22 [ 642.031477] binder: 18089:18091 unknown command 14 [ 642.074785] binder: 18089:18091 ioctl c0306201 20000040 returned -22 [ 642.081987] binder: 18089:18097 unknown command 0 [ 642.113268] binder: 18089:18097 ioctl c0306201 2000dfd0 returned -22 00:06:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="91", 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000000c0), 0xffffff9b) tee(r1, r0, 0x7fffffff, 0x0) [ 642.233750] binder: binder_mmap: 18098 20001000-20004000 bad vm_flags failed -1 [ 642.318284] audit: type=1400 audit(1544313968.298:244): avc: denied { read } for pid=18073 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:06:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 00:06:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x101, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x101100) ioprio_get$uid(0x5, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe00000000, 0x81, 0x0, 0x1000, 0x80000}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000140)) write(r3, &(0x7f0000c34fff), 0xffffff0b) ptrace$setopts(0xffffffffffffffff, 0x0, 0x949a, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000, 0x1}) ioctl$TCSBRK(r3, 0x5409, 0x9) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='gid_map\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00') r6 = socket(0xb, 0xa, 0xd) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x440000, 0x0) write(r6, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000340)={0x4, {{0x2, 0x4e22, @loopback}}, 0x1, 0x2, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @local}}]}, 0x190) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000080)) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f0000000040)=0x8, 0x506) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x3, 0x4}) write$selinux_user(r7, &(0x7f0000000200)={'system_u:object_r:framebuf_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x30) [ 643.624172] ip6_tunnel: À xmit: Local address not yet configured! 00:06:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffff80, 0xffffff80}}}, 0xb8}}, 0x0) 00:06:09 executing program 2: eventfd(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c9c380}, 0x0) 00:06:09 executing program 0: r0 = socket$packet(0x11, 0x1000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 00:06:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000040)) 00:06:09 executing program 4: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) 00:06:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x20000002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x2000000000bf99) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfff}) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r1, 0x0, 0x0, 0xcd55) [ 643.937118] binder: 18115:18122 Acquire 1 refcount change on invalid ref 0 ret -22 [ 643.997852] binder: 18115:18122 unknown command 14 [ 644.002789] binder: 18115:18122 ioctl c0306201 20000040 returned -22 [ 644.055084] binder: 18115:18131 unknown command 0 [ 644.080949] binder: 18115:18131 ioctl c0306201 2000dfd0 returned -22 00:06:10 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000013c0)="240000001a0025f0006bb404feff141c020b5aff6e10b500000780cc080004000000d588", 0x24) 00:06:10 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0x7) 00:06:10 executing program 2: setrlimit(0x400000000000007, &(0x7f0000000000)) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) syz_execute_func(&(0x7f0000000200)="660f3a0913fe8f6854a20d00000021008f440232e0450fd7002e67460f767600c481ff2a3c30c42255adf4f26fc443c142c000") 00:06:10 executing program 3: clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pause() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0xffffffffffffffff, 0x0, 0x0, 0x8000000, 0xe8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:06:11 executing program 4: openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x13d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x7) 00:06:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x101, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x101100) ioprio_get$uid(0x5, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe00000000, 0x81, 0x0, 0x1000, 0x80000}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000140)) write(r3, &(0x7f0000c34fff), 0xffffff0b) ptrace$setopts(0xffffffffffffffff, 0x0, 0x949a, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000, 0x1}) ioctl$TCSBRK(r3, 0x5409, 0x9) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='gid_map\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00') r6 = socket(0xb, 0xa, 0xd) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x440000, 0x0) write(r6, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000340)={0x4, {{0x2, 0x4e22, @loopback}}, 0x1, 0x2, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @local}}]}, 0x190) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000080)) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f0000000040)=0x8, 0x506) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x3, 0x4}) write$selinux_user(r7, &(0x7f0000000200)={'system_u:object_r:framebuf_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x30) 00:06:11 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0x7) 00:06:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x2001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000306) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 00:06:12 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0x7) [ 646.336695] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 646.362506] qtaguid: iface_stat: create6(lo): no inet dev [ 646.487847] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 646.544827] qtaguid: iface_stat: create6(lo): no inet dev 00:06:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4203, r2, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=""/130, 0x82}) 00:06:12 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0x7) 00:06:12 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x101, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x101100) ioprio_get$uid(0x5, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe00000000, 0x81, 0x0, 0x1000, 0x80000}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000140)) write(r3, &(0x7f0000c34fff), 0xffffff0b) ptrace$setopts(0xffffffffffffffff, 0x0, 0x949a, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000, 0x1}) ioctl$TCSBRK(r3, 0x5409, 0x9) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='gid_map\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00') r6 = socket(0xb, 0xa, 0xd) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x440000, 0x0) write(r6, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000340)={0x4, {{0x2, 0x4e22, @loopback}}, 0x1, 0x2, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @local}}]}, 0x190) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000080)) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f0000000040)=0x8, 0x506) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x3, 0x4}) write$selinux_user(r7, &(0x7f0000000200)={'system_u:object_r:framebuf_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x30) 00:06:12 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r3, 0x0, 0x1, 0x3) setgroups(0x0, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da000100000000000200000006000000ff0f0000757709a5b8f42809bd9bd67e57352cf244e89668c087469b98fae672b70475e4d33292d7da67091db8a516ab1e76212c509f6c9c8948937dbfabfc60d2892debe623e438e35ed4f8c8a66c8f54555762138e8addf0bfa373254abebe27e00348297e0ee2713fe0d24506b90696342fe81dce0035a90e6da83fd69588be6370f07b85e91739f80124033fbd5ee23a3474f8eb882318a9b1f0e421a9141f8ea16da2190557b61d69092604eeb0082ababf226b4a21c40be27fe8de728677b2f2f7a730e5e89cb2ab4155b776a291be4bd8129120a9dc77af4dc347244c9384c79a2f4f0051f5cacb3b7ffd1330cadf5dbcd293e5ce329234f4e636841a440ffcc775a0c1bd5cf1eb9b60c23054e407b95cdb3a69ce5284b671e1498d17ddbc986497c2ed2997b484e062d29602794de9f5ff9f0d704dd60178ce66eef7638c5a445d3edc7ce555886b41b16058a52e92ba4e2287b8ab13b344620a26c8b319edea19237bb552bd312392ab540ec74ec7688601fddd4252a35729fd882cd63d"], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000340)) renameat2(r2, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x6) 00:06:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x2001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000306) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 647.517616] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 647.597885] qtaguid: iface_stat: create6(lo): no inet dev 00:06:14 executing program 5: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000080000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xb) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x2000000, 0x0, 0xd8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:06:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x709ff5) 00:06:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/185, 0xb9}, {&(0x7f0000000280)=""/248, 0xf8}], 0x2, 0x33) 00:06:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x2001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000306) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 00:06:14 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x101, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x101100) ioprio_get$uid(0x5, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe00000000, 0x81, 0x0, 0x1000, 0x80000}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000140)) write(r3, &(0x7f0000c34fff), 0xffffff0b) ptrace$setopts(0xffffffffffffffff, 0x0, 0x949a, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000, 0x1}) ioctl$TCSBRK(r3, 0x5409, 0x9) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='gid_map\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00') r6 = socket(0xb, 0xa, 0xd) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x440000, 0x0) write(r6, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000340)={0x4, {{0x2, 0x4e22, @loopback}}, 0x1, 0x2, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @local}}]}, 0x190) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000080)) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f0000000040)=0x8, 0x506) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f00000000c0)={0x7, 0x3, 0x4}) write$selinux_user(r7, &(0x7f0000000200)={'system_u:object_r:framebuf_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x30) 00:06:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r3, 0x0, 0x1, 0x3) setgroups(0x0, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da000100000000000200000006000000ff0f0000757709a5b8f42809bd9bd67e57352cf244e89668c087469b98fae672b70475e4d33292d7da67091db8a516ab1e76212c509f6c9c8948937dbfabfc60d2892debe623e438e35ed4f8c8a66c8f54555762138e8addf0bfa373254abebe27e00348297e0ee2713fe0d24506b90696342fe81dce0035a90e6da83fd69588be6370f07b85e91739f80124033fbd5ee23a3474f8eb882318a9b1f0e421a9141f8ea16da2190557b61d69092604eeb0082ababf226b4a21c40be27fe8de728677b2f2f7a730e5e89cb2ab4155b776a291be4bd8129120a9dc77af4dc347244c9384c79a2f4f0051f5cacb3b7ffd1330cadf5dbcd293e5ce329234f4e636841a440ffcc775a0c1bd5cf1eb9b60c23054e407b95cdb3a69ce5284b671e1498d17ddbc986497c2ed2997b484e062d29602794de9f5ff9f0d704dd60178ce66eef7638c5a445d3edc7ce555886b41b16058a52e92ba4e2287b8ab13b344620a26c8b319edea19237bb552bd312392ab540ec74ec7688601fddd4252a35729fd882cd63d"], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000340)) renameat2(r2, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x6) 00:06:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) 00:06:14 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000300)='/dev/keychord\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) [ 648.865310] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 648.909743] qtaguid: iface_stat: create6(lo): no inet dev 00:06:15 executing program 5: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210007d9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40025, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 00:06:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x200000023e, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x100000001, 0x8) close(r1) 00:06:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x2001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000306) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 00:06:15 executing program 2: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 00:06:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r3, 0x0, 0x1, 0x3) setgroups(0x0, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da000100000000000200000006000000ff0f0000757709a5b8f42809bd9bd67e57352cf244e89668c087469b98fae672b70475e4d33292d7da67091db8a516ab1e76212c509f6c9c8948937dbfabfc60d2892debe623e438e35ed4f8c8a66c8f54555762138e8addf0bfa373254abebe27e00348297e0ee2713fe0d24506b90696342fe81dce0035a90e6da83fd69588be6370f07b85e91739f80124033fbd5ee23a3474f8eb882318a9b1f0e421a9141f8ea16da2190557b61d69092604eeb0082ababf226b4a21c40be27fe8de728677b2f2f7a730e5e89cb2ab4155b776a291be4bd8129120a9dc77af4dc347244c9384c79a2f4f0051f5cacb3b7ffd1330cadf5dbcd293e5ce329234f4e636841a440ffcc775a0c1bd5cf1eb9b60c23054e407b95cdb3a69ce5284b671e1498d17ddbc986497c2ed2997b484e062d29602794de9f5ff9f0d704dd60178ce66eef7638c5a445d3edc7ce555886b41b16058a52e92ba4e2287b8ab13b344620a26c8b319edea19237bb552bd312392ab540ec74ec7688601fddd4252a35729fd882cd63d"], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000340)) renameat2(r2, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x6) 00:06:15 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) [ 649.734333] SELinux: security_context_str_to_sid(staff_u) failed for (dev ramfs, type ramfs) errno=-22 00:06:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5424, 0x710000) [ 650.069951] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 650.107871] qtaguid: iface_stat: create6(lo): no inet dev 00:06:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x200000023e, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x100000001, 0x8) close(r1) 00:06:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) 00:06:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @local}}, 0x0, 0x204}, 0x90) 00:06:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x200000023e, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x100000001, 0x8) close(r1) 00:06:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, "a352d556a6b22f635e439d5facc54334ca9917d96e34d497cd8ab62c7f337ecb2c4cc9021f4f97e2d5f3b6956723e7d6c1f3ae727b6be1d201765bece2b9643c", "228e0fb1c469e516190ac9f227c22a663656a0d24d09b84843528256fbe1ec7e45d315674c10898ca4248e6c3310b30ff353a73e01228350cbb12590d6456530", "742e6d8a7c52875932229d21a3ca21d5dd39c78cb411327c81bee24c03e0b88b"}) 00:06:16 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) r0 = socket$inet6(0xa, 0x201000000000001, 0x0) socketpair$unix(0x1, 0x400000000000000, 0x0, &(0x7f0000000080)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x50, &(0x7f00000002c0), &(0x7f0000000040)=0x44b) 00:06:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) 00:06:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r3, 0x0, 0x1, 0x3) setgroups(0x0, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da000100000000000200000006000000ff0f0000757709a5b8f42809bd9bd67e57352cf244e89668c087469b98fae672b70475e4d33292d7da67091db8a516ab1e76212c509f6c9c8948937dbfabfc60d2892debe623e438e35ed4f8c8a66c8f54555762138e8addf0bfa373254abebe27e00348297e0ee2713fe0d24506b90696342fe81dce0035a90e6da83fd69588be6370f07b85e91739f80124033fbd5ee23a3474f8eb882318a9b1f0e421a9141f8ea16da2190557b61d69092604eeb0082ababf226b4a21c40be27fe8de728677b2f2f7a730e5e89cb2ab4155b776a291be4bd8129120a9dc77af4dc347244c9384c79a2f4f0051f5cacb3b7ffd1330cadf5dbcd293e5ce329234f4e636841a440ffcc775a0c1bd5cf1eb9b60c23054e407b95cdb3a69ce5284b671e1498d17ddbc986497c2ed2997b484e062d29602794de9f5ff9f0d704dd60178ce66eef7638c5a445d3edc7ce555886b41b16058a52e92ba4e2287b8ab13b344620a26c8b319edea19237bb552bd312392ab540ec74ec7688601fddd4252a35729fd882cd63d"], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000340)) renameat2(r2, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x6) 00:06:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB='\b'], 0x1) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x5a92) sendfile(r4, r2, &(0x7f0000000240), 0xffffffff) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") 00:06:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, "a352d556a6b22f635e439d5facc54334ca9917d96e34d497cd8ab62c7f337ecb2c4cc9021f4f97e2d5f3b6956723e7d6c1f3ae727b6be1d201765bece2b9643c", "228e0fb1c469e516190ac9f227c22a663656a0d24d09b84843528256fbe1ec7e45d315674c10898ca4248e6c3310b30ff353a73e01228350cbb12590d6456530", "742e6d8a7c52875932229d21a3ca21d5dd39c78cb411327c81bee24c03e0b88b"}) 00:06:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x200000023e, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x100000001, 0x8) close(r1) 00:06:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) 00:06:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x41) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) write$evdev(r0, &(0x7f0000000040), 0x0) 00:06:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, "a352d556a6b22f635e439d5facc54334ca9917d96e34d497cd8ab62c7f337ecb2c4cc9021f4f97e2d5f3b6956723e7d6c1f3ae727b6be1d201765bece2b9643c", "228e0fb1c469e516190ac9f227c22a663656a0d24d09b84843528256fbe1ec7e45d315674c10898ca4248e6c3310b30ff353a73e01228350cbb12590d6456530", "742e6d8a7c52875932229d21a3ca21d5dd39c78cb411327c81bee24c03e0b88b"}) 00:06:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) 00:06:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB='\b'], 0x1) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x5a92) sendfile(r4, r2, &(0x7f0000000240), 0xffffffff) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") 00:06:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) [ 653.105917] input: syz0 as /devices/virtual/input/input48 [ 653.217392] input: syz0 as /devices/virtual/input/input49 00:06:20 executing program 2: r0 = inotify_init1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 00:06:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, "a352d556a6b22f635e439d5facc54334ca9917d96e34d497cd8ab62c7f337ecb2c4cc9021f4f97e2d5f3b6956723e7d6c1f3ae727b6be1d201765bece2b9643c", "228e0fb1c469e516190ac9f227c22a663656a0d24d09b84843528256fbe1ec7e45d315674c10898ca4248e6c3310b30ff353a73e01228350cbb12590d6456530", "742e6d8a7c52875932229d21a3ca21d5dd39c78cb411327c81bee24c03e0b88b"}) 00:06:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) 00:06:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410051100ef000097"}], 0x20}, 0x0) 00:06:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) 00:06:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB='\b'], 0x1) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x5a92) sendfile(r4, r2, &(0x7f0000000240), 0xffffffff) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") 00:06:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r3, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fallocate(r2, 0x0, 0x0, 0x80003ff) [ 654.369227] input: syz0 as /devices/virtual/input/input50 [ 654.381535] input: syz0 as /devices/virtual/input/input51 00:06:20 executing program 4: socket$inet6(0xa, 0x2100000000000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 00:06:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) 00:06:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) 00:06:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB='\b'], 0x1) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x5a92) sendfile(r4, r2, &(0x7f0000000240), 0xffffffff) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") 00:06:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) preadv(r0, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220, 0x100000}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247, 0x98}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) [ 655.214442] input: syz0 as /devices/virtual/input/input52 [ 655.250377] input: syz0 as /devices/virtual/input/input53 00:06:21 executing program 2: r0 = inotify_init1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 00:06:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) 00:06:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) 00:06:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000017c0)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140), 0xc) getsockname(0xffffffffffffff9c, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000680)=0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000006c0)={@dev={0xfe, 0x80, [], 0xb}, 0x20, 0xfffffffffffffffd, 0x3, 0x3, 0x1, 0xf47, 0x5}, 0x20) fchdir(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001780)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000500)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000540)='./bus\x00', 0xc000, 0x0) lseek(r3, 0x0, 0x2) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) write$P9_RREADLINK(r5, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES64=r1, @ANYRESHEX, @ANYRES32=r4, @ANYRESDEC=0x0], 0x36) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'.yz'}, &(0x7f0000000100)="ae", 0x1, 0xfffffffffffffffc) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r5, &(0x7f0000000300)='./file2\x00') ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r7 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000003c0)="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") mkdirat(r5, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) renameat2(r7, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) write$P9_RLINK(r5, &(0x7f0000001740)={0xfe5b, 0x47, 0x1}, 0x7) renameat(r5, &(0x7f0000000600)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r3, &(0x7f0000000000)='./file0\x00') readlinkat(r7, &(0x7f0000000580)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000740)=""/4096, 0xfffffffffffffdb1) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000180)='./bus\x00', 0x40) setsockopt$inet_tcp_int(r4, 0x6, 0x1f, &(0x7f00000004c0)=0xff, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x0) [ 656.194709] input: syz0 as /devices/virtual/input/input54 00:06:22 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mem_exclusive\x00', 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x60202) write$selinux_create(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="737973746562c3245ed209b68b63745f723a7661725f6175740200"], 0x1b) r1 = socket(0x18, 0x0, 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x33a) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) accept4$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000400)=""/125) [ 656.383737] input: syz0 as /devices/virtual/input/input55 00:06:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0) 00:06:22 executing program 2: r0 = inotify_init1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 00:06:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={"6e72300100", 0x4000001}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)) r3 = gettid() openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getgid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x4, 0x1}) ptrace$getregs(0xe, r3, 0xa8cc, &(0x7f00000003c0)=""/76) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pipe(&(0x7f0000000440)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) bind$inet6(r7, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r7, 0x7) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000080)=0x80000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) fcntl$setsig(r8, 0xa, 0x0) accept4(r7, 0x0, &(0x7f0000000000)=0xffe5, 0x0) dup2(r9, r7) 00:06:23 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x176}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x14}}, 0x0) socketpair(0xb, 0x0, 0xde, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/228) r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r5 = socket$inet6(0xa, 0x0, 0x8) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) gettid() ioctl$RTC_PIE_ON(r4, 0x7005) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x2, 0x93ce, 0xace, 0x0, 0xd8, 0x4000, 0x4, 0x7f, 0x3, 0x6, 0x80000000, 0xffff, 0xce8a, 0x80000001, 0xb5, 0x9265, 0x8, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x20000005, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000480), 0xa}, 0x0, 0x3, 0x1f}, 0x0, 0x0, r1, 0xa) getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000440)={"4854ff020900000007000000000000000000000000000000000000000a"}, &(0x7f0000000340)=0xfffffffffffffe40) dup(r7) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r3, &(0x7f0000000180), 0x8) 00:06:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000017c0)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140), 0xc) getsockname(0xffffffffffffff9c, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000680)=0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000006c0)={@dev={0xfe, 0x80, [], 0xb}, 0x20, 0xfffffffffffffffd, 0x3, 0x3, 0x1, 0xf47, 0x5}, 0x20) fchdir(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001780)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000500)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000540)='./bus\x00', 0xc000, 0x0) lseek(r3, 0x0, 0x2) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) write$P9_RREADLINK(r5, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES64=r1, @ANYRESHEX, @ANYRES32=r4, @ANYRESDEC=0x0], 0x36) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'.yz'}, &(0x7f0000000100)="ae", 0x1, 0xfffffffffffffffc) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r5, &(0x7f0000000300)='./file2\x00') ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r7 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000003c0)="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") mkdirat(r5, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) renameat2(r7, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) write$P9_RLINK(r5, &(0x7f0000001740)={0xfe5b, 0x47, 0x1}, 0x7) renameat(r5, &(0x7f0000000600)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r3, &(0x7f0000000000)='./file0\x00') readlinkat(r7, &(0x7f0000000580)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000740)=""/4096, 0xfffffffffffffdb1) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000180)='./bus\x00', 0x40) setsockopt$inet_tcp_int(r4, 0x6, 0x1f, &(0x7f00000004c0)=0xff, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x0) 00:06:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0) 00:06:24 executing program 2: r0 = inotify_init1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 00:06:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0) 00:06:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={"6e72300100", 0x4000001}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)) r3 = gettid() openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getgid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x4, 0x1}) ptrace$getregs(0xe, r3, 0xa8cc, &(0x7f00000003c0)=""/76) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pipe(&(0x7f0000000440)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) bind$inet6(r7, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r7, 0x7) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000080)=0x80000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) fcntl$setsig(r8, 0xa, 0x0) accept4(r7, 0x0, &(0x7f0000000000)=0xffe5, 0x0) dup2(r9, r7) 00:06:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000017c0)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140), 0xc) getsockname(0xffffffffffffff9c, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000680)=0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000006c0)={@dev={0xfe, 0x80, [], 0xb}, 0x20, 0xfffffffffffffffd, 0x3, 0x3, 0x1, 0xf47, 0x5}, 0x20) fchdir(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001780)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000500)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000540)='./bus\x00', 0xc000, 0x0) lseek(r3, 0x0, 0x2) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) write$P9_RREADLINK(r5, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES64=r1, @ANYRESHEX, @ANYRES32=r4, @ANYRESDEC=0x0], 0x36) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'.yz'}, &(0x7f0000000100)="ae", 0x1, 0xfffffffffffffffc) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r5, &(0x7f0000000300)='./file2\x00') ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r7 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000003c0)="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") mkdirat(r5, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) renameat2(r7, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) write$P9_RLINK(r5, &(0x7f0000001740)={0xfe5b, 0x47, 0x1}, 0x7) renameat(r5, &(0x7f0000000600)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r3, &(0x7f0000000000)='./file0\x00') readlinkat(r7, &(0x7f0000000580)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000740)=""/4096, 0xfffffffffffffdb1) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000180)='./bus\x00', 0x40) setsockopt$inet_tcp_int(r4, 0x6, 0x1f, &(0x7f00000004c0)=0xff, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x0) 00:06:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0) 00:06:26 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000540)="5500000019007f5300fe01b2a4a280930a06000000a84308910000003900090020000c00060000001900a30700000000000000dc1338d54400009b84139298112e545a3d34c9f8165670229a6ef75a1500de448daa", 0x55}], 0x1}, 0x0) 00:06:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x407, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0xfffffffc}}}, 0xb8}}, 0x0) 00:06:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) 00:06:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={"6e72300100", 0x4000001}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)) r3 = gettid() openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getgid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x4, 0x1}) ptrace$getregs(0xe, r3, 0xa8cc, &(0x7f00000003c0)=""/76) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pipe(&(0x7f0000000440)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) bind$inet6(r7, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r7, 0x7) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000080)=0x80000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) fcntl$setsig(r8, 0xa, 0x0) accept4(r7, 0x0, &(0x7f0000000000)=0xffe5, 0x0) dup2(r9, r7) 00:06:27 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x176}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x14}}, 0x0) socketpair(0xb, 0x0, 0xde, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/228) r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r5 = socket$inet6(0xa, 0x0, 0x8) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) gettid() ioctl$RTC_PIE_ON(r4, 0x7005) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x2, 0x93ce, 0xace, 0x0, 0xd8, 0x4000, 0x4, 0x7f, 0x3, 0x6, 0x80000000, 0xffff, 0xce8a, 0x80000001, 0xb5, 0x9265, 0x8, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x20000005, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000480), 0xa}, 0x0, 0x3, 0x1f}, 0x0, 0x0, r1, 0xa) getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000440)={"4854ff020900000007000000000000000000000000000000000000000a"}, &(0x7f0000000340)=0xfffffffffffffe40) dup(r7) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r3, &(0x7f0000000180), 0x8) 00:06:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={"6e72300100", 0x4000001}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)) r3 = gettid() openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getgid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x4, 0x1}) ptrace$getregs(0xe, r3, 0xa8cc, &(0x7f00000003c0)=""/76) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pipe(&(0x7f0000000440)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) bind$inet6(r7, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r7, 0x7) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000080)=0x80000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) fcntl$setsig(r8, 0xa, 0x0) accept4(r7, 0x0, &(0x7f0000000000)=0xffe5, 0x0) dup2(r9, r7) 00:06:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000017c0)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140), 0xc) getsockname(0xffffffffffffff9c, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000680)=0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000006c0)={@dev={0xfe, 0x80, [], 0xb}, 0x20, 0xfffffffffffffffd, 0x3, 0x3, 0x1, 0xf47, 0x5}, 0x20) fchdir(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001780)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000500)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000540)='./bus\x00', 0xc000, 0x0) lseek(r3, 0x0, 0x2) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) write$P9_RREADLINK(r5, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES64=r1, @ANYRESHEX, @ANYRES32=r4, @ANYRESDEC=0x0], 0x36) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'.yz'}, &(0x7f0000000100)="ae", 0x1, 0xfffffffffffffffc) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r5, &(0x7f0000000300)='./file2\x00') ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r7 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000003c0)="c154a4d72156a0433ec28c361bfeac8525e4a624c28a2ba86052540285514ffd543bf2b8d99b23ac82d839eb9dddfb9defbf49ea962526714d3b159b50de6fb6fc912193b5a343b448a0b0d1b45eb38dff0fa3dd0051d0836fe004ac2b3949e342848768090502ca20542a2fd1ca0a81e3a60cfa13a91c26c49d0737b39991c4c53067e9f70b23e1d4bad92add35846813d2ea261647ed9f370e19a322cff7bf810c9f7011dacebcd8c4c7781bb79e4b723991f4699af75cf5a3f60cfebfaf48673136c022f79b0fd94c069b189238f32af0ba577cca2910ce4c9e4c13113e0712a88fe6bd7b15d9d208d4b66a04a691814d74f95d16c8cd4287d4472cc6f0d6") mkdirat(r5, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) renameat2(r7, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) write$P9_RLINK(r5, &(0x7f0000001740)={0xfe5b, 0x47, 0x1}, 0x7) renameat(r5, &(0x7f0000000600)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r3, &(0x7f0000000000)='./file0\x00') readlinkat(r7, &(0x7f0000000580)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000740)=""/4096, 0xfffffffffffffdb1) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000180)='./bus\x00', 0x40) setsockopt$inet_tcp_int(r4, 0x6, 0x1f, &(0x7f00000004c0)=0xff, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x0) 00:06:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffb, 0x1}) 00:06:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x6, 0x9a69976b73139206) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000000020040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 00:06:27 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() io_setup(0xffff, &(0x7f0000000280)) ptrace$setopts(0x4206, r0, 0x0, 0x0) accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x800) tkill(r0, 0x21) waitid(0x0, 0x0, 0x0, 0x8, 0x0) pipe2(0x0, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 00:06:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r1, 0x0, 0x0, 0x4003ff) fallocate(r1, 0x1, 0x0, 0x800fff6) 00:06:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x60}}) 00:06:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001580)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x30}], 0xf, 0x0) 00:06:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xb, &(0x7f0000001780)={@empty, @dev}, 0xc) 00:06:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x6, 0x9a69976b73139206) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000000020040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 00:06:28 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x80000002) read(r0, 0x0, 0x0) close(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:06:30 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x176}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x14}}, 0x0) socketpair(0xb, 0x0, 0xde, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/228) r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r5 = socket$inet6(0xa, 0x0, 0x8) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) gettid() ioctl$RTC_PIE_ON(r4, 0x7005) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x2, 0x93ce, 0xace, 0x0, 0xd8, 0x4000, 0x4, 0x7f, 0x3, 0x6, 0x80000000, 0xffff, 0xce8a, 0x80000001, 0xb5, 0x9265, 0x8, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x20000005, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000480), 0xa}, 0x0, 0x3, 0x1f}, 0x0, 0x0, r1, 0xa) getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000440)={"4854ff020900000007000000000000000000000000000000000000000a"}, &(0x7f0000000340)=0xfffffffffffffe40) dup(r7) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r3, &(0x7f0000000180), 0x8) 00:06:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) dup3(r0, r1, 0x0) 00:06:30 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='dev ', 0x3) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x80000000) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000900)) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ec0)={{{@in=@loopback, @in6}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000fc0)=0xe8) getresgid(&(0x7f0000000e80), &(0x7f0000006a80), &(0x7f0000006b00)) getresuid(&(0x7f0000003140), &(0x7f0000003180), &(0x7f00000031c0)) getgid() getuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004b80)={{{@in, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast1}}, &(0x7f0000004c80)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004d80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004dc0), &(0x7f0000004e00)=0xc) lstat(&(0x7f0000004cc0)='./file0\x00', &(0x7f0000004e80)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000004f00)) getuid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000005000)) stat(&(0x7f0000005040)='./file0\x00', &(0x7f0000005080)) fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(0x0) getresuid(&(0x7f0000005940), &(0x7f0000005980), &(0x7f00000059c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005a00), &(0x7f0000005a40)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000005a80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005ac0)={{{@in=@remote, @in=@multicast1}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000005bc0)=0xe8) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005c00), &(0x7f0000005c40)=0xc) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000006600)={{{@in, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000006700)=0xe8) stat(&(0x7f0000006740)='./file0\x00', &(0x7f0000006780)) 00:06:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3, &(0x7f0000c86000), &(0x7f0000000080)=0xa713c67f) 00:06:30 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0xd8c) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) close(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x3, 0x0) 00:06:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x6, 0x9a69976b73139206) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000000020040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 00:06:30 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1}}, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:06:30 executing program 1: prctl$PR_SET_FPEXC(0x25, 0x710000) 00:06:30 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}], 0x10}}], 0x1, 0x0) 00:06:30 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x802) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "24b0eb7946c64808cb757347a4ebf52dddc47b4969c2dfb993300525cff83cc7e9"}, 0x2c) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000140)=""/69, 0x45}], 0x2) 00:06:31 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1}}, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:06:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x2, 0x4fb) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 00:06:32 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x176}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x14}}, 0x0) socketpair(0xb, 0x0, 0xde, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/228) r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r5 = socket$inet6(0xa, 0x0, 0x8) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) gettid() ioctl$RTC_PIE_ON(r4, 0x7005) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x2, 0x93ce, 0xace, 0x0, 0xd8, 0x4000, 0x4, 0x7f, 0x3, 0x6, 0x80000000, 0xffff, 0xce8a, 0x80000001, 0xb5, 0x9265, 0x8, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x20000005, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000480), 0xa}, 0x0, 0x3, 0x1f}, 0x0, 0x0, r1, 0xa) getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000440)={"4854ff020900000007000000000000000000000000000000000000000a"}, &(0x7f0000000340)=0xfffffffffffffe40) dup(r7) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r3, &(0x7f0000000180), 0x8) 00:06:32 executing program 0: memfd_create(&(0x7f0000000040)='trustedvboxnet1@:nodev\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x400) pselect6(0x1c, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)={0x8}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000100)={&(0x7f0000000440), 0x8}) 00:06:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x6, 0x9a69976b73139206) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000000020040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 00:06:32 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {0x0}, {0x0}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) sched_rr_get_interval(0x0, &(0x7f0000000240)) 00:06:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="390000001300090468fe0700000000000000ff3f030000004500010700000014190016000400020007000a000200000800005d14a4e91ee438", 0x39}], 0x1) 00:06:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1}}, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:06:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1}}, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:06:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x800000200000, @remote}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc13]}, 0xfffffffffffffe04) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 00:06:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509090007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 00:06:33 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) chdir(&(0x7f0000000080)='./file0\x00') capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 667.142166] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 00:06:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x800003ffff) io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 00:06:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:06:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)=""/248, 0x381}], 0x1, &(0x7f0000000bc0)=""/4096, 0xffffffffffffff1d}}], 0x1, 0x0, 0x0) 00:06:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb}}}}}}, &(0x7f0000000000)) 00:06:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800000020000007, &(0x7f0000000040)={0xa, 0x800000006bb, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 00:06:34 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {0x0}, {0x0}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) sched_rr_get_interval(0x0, &(0x7f0000000240)) 00:06:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}, @RTA_PREFSRC={0x8, 0x4, @multicast1}]}, 0x2c}}, 0x0) 00:06:34 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {0x0}, {0x0}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) sched_rr_get_interval(0x0, &(0x7f0000000240)) [ 668.862248] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. 00:06:34 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f00000003c0)='stat\x00') r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x1) 00:06:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sync_file_range(r2, 0x0, 0x0, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in=@local}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) getgid() r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) ioctl$KDSETLED(r3, 0x8916, 0x1000000000553) 00:06:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28}, 0x28) fcntl$setstatus(r1, 0x4, 0x800000060006100) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) read(r2, 0x0, 0x0) 00:06:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000100)=0x7fff, 0xff88) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040), 0x4) [ 669.492141] audit: type=1404 audit(1544313995.468:245): enforcing=2 old_enforcing=0 auid=4294967295 ses=4294967295 00:06:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 00:06:35 executing program 2: sched_setscheduler(0x0, 0x3, &(0x7f0000000100)) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xfffffffffffffc44, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)='"'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)='^'}) 00:06:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000002ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001800010000000000000000000200000000000007000000000800fddc6e9a000004001600"], 0x1}}, 0x0) 00:06:35 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {0x0}, {0x0}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) sched_rr_get_interval(0x0, &(0x7f0000000240)) 00:06:36 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {0x0}, {0x0}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) sched_rr_get_interval(0x0, &(0x7f0000000240)) 00:06:36 executing program 5: mkdir(&(0x7f0000001a40)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x0) [ 670.186196] binder: 18716:18719 transaction failed 29189/-22, size 0-0 line 3014 [ 670.207690] binder: undelivered TRANSACTION_ERROR: 29189 [ 670.214429] binder: 18717:18724 ERROR: BC_REGISTER_LOOPER called without request 00:06:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 670.852440] audit: type=1400 audit(1544313996.828:246): avc: denied { set_context_mgr } for pid=18739 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 670.888593] audit: type=1400 audit(1544313996.868:247): avc: denied { associate } for pid=18740 comm="syz-executor5" name="bus" dev="sysfs" ino=8 scontext=system_u:object_r:dmesg_exec_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem permissive=0 [ 670.935722] binder: 18717:18746 ERROR: BC_REGISTER_LOOPER called without request 00:06:37 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) [ 671.044830] binder: 18739:18743 ioctl 40046207 0 returned -13 [ 671.044915] binder: 18739:18745 transaction failed 29189/-22, size 0-0 line 3014 [ 671.094153] audit: type=1400 audit(1544313997.078:248): avc: denied { associate } for pid=18740 comm="syz-executor5" name="bus" dev="sysfs" ino=8 scontext=system_u:object_r:dmesg_exec_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem permissive=0 00:06:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/policy\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000700)=""/208) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, r5, &(0x7f0000000000), 0x246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="6effffff6f00000100800000000044eda1ec516e50fe5c8127fe877667cc087ed363ff0ff8ffffffffff94733e4f73a00965cac21c5ca4673d5d82ced9700d5048c7cc"], 0x43) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f00000006c0), &(0x7f0000000300)=0x1) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000580)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000007000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) [ 671.212394] binder: undelivered TRANSACTION_ERROR: 29189 00:06:37 executing program 1: seccomp(0x200000001, 0x0, &(0x7f0000016000)={0x1, &(0x7f00001e0fe8)=[{0x6, 0x0, 0x0, 0x7ffff7ff00000}]}) 00:06:37 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {0x0}, {0x0}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) sched_rr_get_interval(0x0, &(0x7f0000000240)) 00:06:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 00:06:37 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {0x0}, {0x0}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) sched_rr_get_interval(0x0, &(0x7f0000000240)) 00:06:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "373cb8f662baa82ff03dc7d4cf95a35bc48f276a9b31b6a64971f21128df2ef2"}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 672.171018] audit: type=1400 audit(1544313998.148:249): avc: denied { set_context_mgr } for pid=18764 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 672.457104] binder: 18764:18779 transaction failed 29189/-22, size 0-0 line 3014 [ 672.465472] binder: 18764:18769 ioctl 40046207 0 returned -13 00:06:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 672.610451] binder: undelivered TRANSACTION_ERROR: 29189 00:06:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x400000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000180)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 00:06:39 executing program 4: prctl$PR_SET_DUMPABLE(0x4, 0x0) inotify_init1(0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') [ 673.307179] binder: 18790:18791 transaction failed 29189/-22, size 0-0 line 3014 [ 673.397287] binder: undelivered TRANSACTION_ERROR: 29189 00:06:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 00:06:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'veth0\x00', 0x201e}) 00:06:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000080)) 00:06:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/policy\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000700)=""/208) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, r5, &(0x7f0000000000), 0x246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="6effffff6f00000100800000000044eda1ec516e50fe5c8127fe877667cc087ed363ff0ff8ffffffffff94733e4f73a00965cac21c5ca4673d5d82ced9700d5048c7cc"], 0x43) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f00000006c0), &(0x7f0000000300)=0x1) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000580)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000007000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) 00:06:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) 00:06:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr(0x0, 0x0, &(0x7f0000000180)='/dev/keychord\x00', 0xe, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x241, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0000063dc900000001000400d2"], 0xd) write$eventfd(r1, &(0x7f0000000040)=0x100000001, 0x2e9) 00:06:40 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getitimer(0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe2(0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1ff, 0x8, 0x8, 0x2, 0x7, 0x4, 0x1, 0x3f, 0x2, 0x3}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10002, 0x8) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) clock_gettime(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840)) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000080)) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 00:06:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r2 = dup(r0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f00000000c0)="b5", 0x1) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/106, 0x6a}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000000c0), 0x400000000000254, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) 00:06:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r0) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x1, 0x0, 0x0) [ 675.083954] keychord: keycode 25647 out of range 00:06:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xcbd6) fcntl$setstatus(r1, 0x4, 0x4000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r3, 0x541f, &(0x7f0000000000)) write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a) [ 675.151221] keychord: keycode 25647 out of range 00:06:41 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x40000006100) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffbfffe) [ 675.772386] tty_warn_deprecated_flags: 'syz-executor2' is using deprecated serial flags (with no effect): 00000700 00:06:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xcbd6) fcntl$setstatus(r1, 0x4, 0x4000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r3, 0x541f, &(0x7f0000000000)) write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a) 00:06:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x480) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={"6c6f0000000000000100"}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r3 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f000000cb40)={&(0x7f0000000080), 0xc, &(0x7f000000cb00)={&(0x7f000000c480)={0x14}, 0x14}}, 0x0) 00:06:41 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000005700)={&(0x7f0000000040), 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\x00\x001\x00'}]}, 0x34}}, 0x0) 00:06:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$UI_END_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000300)={0xffffffffffffffff}) [ 676.844290] tty_warn_deprecated_flags: 'syz-executor2' is using deprecated serial flags (with no effect): 00000700 [ 677.034546] device lo entered promiscuous mode [ 677.452087] device lo left promiscuous mode [ 677.629719] device lo entered promiscuous mode 00:06:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000100)=""/11, 0x3bd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) r2 = epoll_create1(0x0) r3 = syz_open_pts(r0, 0x0) close(r0) dup2(r2, r3) 00:06:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/policy\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000700)=""/208) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, r5, &(0x7f0000000000), 0x246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="6effffff6f00000100800000000044eda1ec516e50fe5c8127fe877667cc087ed363ff0ff8ffffffffff94733e4f73a00965cac21c5ca4673d5d82ced9700d5048c7cc"], 0x43) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f00000006c0), &(0x7f0000000300)=0x1) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000580)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000007000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) 00:06:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xc, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 00:06:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xcbd6) fcntl$setstatus(r1, 0x4, 0x4000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r3, 0x541f, &(0x7f0000000000)) write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a) 00:06:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) 00:06:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x40000006100) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffbfffe) 00:06:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc550) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000580)="ae612524e37d28d4e8c35d69188f5b3f585c23652e5c27ae8e3ceb5a2bd5604da8e455c235ee245f5f337fbc36173b38f37fd2c852c39311b09c1eb7d0847d610ff11b81a364c44482997af5d85f652d953e379b11fe0ab8c0f09630e3af23f93873f31beffbad1c41786f0d83941360b4e0ec876be44750c526bfea53efabe55077d1f6c1b9ae5398b1499d33d9d1fff161418ae8f6c017aa5bdf47b1f2ed4b6be0447c549e4a7873f34ab83b2975794ade236b010f84", 0xb7}], 0x1) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x10001) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000031c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003200)=0x14) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000003240)={@mcast1, r6}, 0x14) ioctl$TIOCGPGRP(r4, 0x402c542d, &(0x7f0000000040)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 678.214476] tty_warn_deprecated_flags: 'syz-executor2' is using deprecated serial flags (with no effect): 00000700 00:06:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xcbd6) fcntl$setstatus(r1, 0x4, 0x4000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r3, 0x541f, &(0x7f0000000000)) write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a) 00:06:44 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x31d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 00:06:44 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) read(0xffffffffffffffff, 0x0, 0xff95) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x1000000000000, 0x0, 0xfffffffffffffffc}) 00:06:44 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x80, 0x0}}], 0x2, 0x0) [ 679.158250] tty_warn_deprecated_flags: 'syz-executor2' is using deprecated serial flags (with no effect): 00000700 00:06:45 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00006ed000), &(0x7f0000000040)=0x4) 00:06:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc550) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000580)="ae612524e37d28d4e8c35d69188f5b3f585c23652e5c27ae8e3ceb5a2bd5604da8e455c235ee245f5f337fbc36173b38f37fd2c852c39311b09c1eb7d0847d610ff11b81a364c44482997af5d85f652d953e379b11fe0ab8c0f09630e3af23f93873f31beffbad1c41786f0d83941360b4e0ec876be44750c526bfea53efabe55077d1f6c1b9ae5398b1499d33d9d1fff161418ae8f6c017aa5bdf47b1f2ed4b6be0447c549e4a7873f34ab83b2975794ade236b010f84", 0xb7}], 0x1) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x10001) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000031c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003200)=0x14) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000003240)={@mcast1, r6}, 0x14) ioctl$TIOCGPGRP(r4, 0x402c542d, &(0x7f0000000040)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 00:06:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/policy\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000700)=""/208) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, r5, &(0x7f0000000000), 0x246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="6effffff6f00000100800000000044eda1ec516e50fe5c8127fe877667cc087ed363ff0ff8ffffffffff94733e4f73a00965cac21c5ca4673d5d82ced9700d5048c7cc"], 0x43) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f00000006c0), &(0x7f0000000300)=0x1) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000580)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000007000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) 00:06:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x40000006100) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffbfffe) 00:06:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x16) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 00:06:47 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) 00:06:47 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='sched\x00') exit(0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/166, 0xa6}], 0x1) 00:06:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc550) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000580)="ae612524e37d28d4e8c35d69188f5b3f585c23652e5c27ae8e3ceb5a2bd5604da8e455c235ee245f5f337fbc36173b38f37fd2c852c39311b09c1eb7d0847d610ff11b81a364c44482997af5d85f652d953e379b11fe0ab8c0f09630e3af23f93873f31beffbad1c41786f0d83941360b4e0ec876be44750c526bfea53efabe55077d1f6c1b9ae5398b1499d33d9d1fff161418ae8f6c017aa5bdf47b1f2ed4b6be0447c549e4a7873f34ab83b2975794ade236b010f84", 0xb7}], 0x1) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x10001) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000031c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003200)=0x14) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000003240)={@mcast1, r6}, 0x14) ioctl$TIOCGPGRP(r4, 0x402c542d, &(0x7f0000000040)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 00:06:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) prctl$PR_SET_SECUREBITS(0x1c, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x100000020000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x20141042, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000040)) ftruncate(r2, 0x280080) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000200)=0x100003, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendfile(r1, r2, &(0x7f0000000000), 0x200800900000002) 00:06:47 executing program 3: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000001040)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001080)=""/244, 0xf4) getdents(r1, &(0x7f0000000040)=""/4096, 0x1000) 00:06:48 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100), 0x2000000000000314, 0x10400003) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0), 0x8) 00:06:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc550) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000580)="ae612524e37d28d4e8c35d69188f5b3f585c23652e5c27ae8e3ceb5a2bd5604da8e455c235ee245f5f337fbc36173b38f37fd2c852c39311b09c1eb7d0847d610ff11b81a364c44482997af5d85f652d953e379b11fe0ab8c0f09630e3af23f93873f31beffbad1c41786f0d83941360b4e0ec876be44750c526bfea53efabe55077d1f6c1b9ae5398b1499d33d9d1fff161418ae8f6c017aa5bdf47b1f2ed4b6be0447c549e4a7873f34ab83b2975794ade236b010f84", 0xb7}], 0x1) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x10001) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000031c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003200)=0x14) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000003240)={@mcast1, r6}, 0x14) ioctl$TIOCGPGRP(r4, 0x402c542d, &(0x7f0000000040)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 00:06:48 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "120000000100000000340098641888bc"}, 0x20) pipe(&(0x7f0000000040)) fstat(r0, &(0x7f0000000080)) [ 683.382636] SELinux: security policydb version 18 (MLS) not backwards compatible [ 683.448903] SELinux: security policydb version 18 (MLS) not backwards compatible 00:06:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) 00:06:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffffb2) fcntl$setstatus(r1, 0x4, 0x800003ffff) io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1}]) chmod(&(0x7f0000000180)='./file1\x00', 0x0) seccomp(0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) 00:06:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x40000006100) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffbfffe) 00:06:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@remote, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 00:06:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000005001}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$tun(r0, &(0x7f0000000200)={@void, @val={0x0, 0x0, 0x1}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x11, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff11) 00:06:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast1, @loopback, @ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0xfb}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) 00:06:51 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001f80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f0000000080)=""/248, 0xf8}], 0x2, 0x0) [ 685.631216] audit: type=1326 audit(1544314011.608:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=19015 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4ba code=0x0 00:06:52 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80012, r0, 0x0) clone(0x0, &(0x7f0000000280), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 00:06:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fe5fee)='/dev/input/event#\x00', 0xc, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000ffcffc)) [ 686.294711] audit: type=1326 audit(1544314012.278:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=19015 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4ba code=0x0 00:06:52 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa283000700000006000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:06:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs={0x400c630f}, @transaction_sg={0x40486311, {{0x0, 0x40406301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 00:06:52 executing program 0: clone(0x210007f8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff900000002ab00008257004000000000e9088a1ff9dc01000000000000000000000000"], 0x38) 00:06:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xfffffffffffffd8b, 0x0, 0x0, 0x0) [ 686.936809] binder: 19050:19051 Acquire 1 refcount change on invalid ref 0 ret -22 00:06:53 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) rename(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)='./file1/file0\x00') rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000280)='./file1\x00') [ 687.011386] binder: 19050:19055 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 687.048941] binder: 19050:19055 got reply transaction with no transaction stack [ 687.129956] binder: 19050:19055 transaction failed 29201/-71, size 0-0 line 2922 [ 687.246690] binder: undelivered TRANSACTION_ERROR: 29201 00:06:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x30, &(0x7f0000678f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x3100) 00:06:54 executing program 1: clone(0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) 00:06:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xfffffffffffffd8b, 0x0, 0x0, 0x0) 00:06:54 executing program 5: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x29) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000400)="4779f34b7d874af9f9c07b3f7f9585f24d80c1678549017bc5b657e454d3a4afc29d831e10392a835f21485a5b801b1f82d1d85a95e6758488107111878f9ca93858d41dc113a951d016622f1f796cab3077ded67382b1f3a9280ed8293144b1e7f05cc83c8ff40ddec1ae98648b408a3225b586b3bf21de9c") ptrace$cont(0x1f, r0, 0x0, 0x0) 00:06:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)) 00:06:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1d4, 0x4) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 00:06:54 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast1, @local, 0x2, 0x0, 0x0, 0x100000000000fa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 00:06:54 executing program 3: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) getuid() 00:06:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="0401000000c000ddb8060900ff7ccbc202938207d903378c398d5375c50000000006c9677d2780e1dc5712f29513f06f776575efe5eb8f5972eaecff", 0x3c, 0x0, &(0x7f0000000080)={0xa, 0x100200000800, 0x6, @ipv4={[], [], @dev}}, 0x1c) 00:06:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)="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") fgetxattr(r0, &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) 00:06:54 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x47b, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000100)="73797374656d5f753a3a6d6f816e745f657865635f743a733400", 0x1a, 0x0) 00:06:55 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x7) 00:06:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xfffffffffffffd8b, 0x0, 0x0, 0x0) [ 689.474331] audit: type=1401 audit(1544314015.458:252): op=setxattr invalid_context=73797374656D5F753A3A6D6F816E745F657865635F743A7334 00:06:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 689.556145] audit: type=1401 audit(1544314015.538:253): op=setxattr invalid_context=73797374656D5F753A3A6D6F816E745F657865635F743A7334 00:06:55 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 00:06:55 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000700)=ANY=[], 0xfffffff5) close(r1) memfd_create(&(0x7f0000000040)="222547504c005fd5cdeb3b3b663f8d3482fcfd1039bb51abd89c7f57a9", 0x0) splice(r0, 0x0, r1, 0x0, 0x400000000002, 0x0) 00:06:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000011c0), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r2) 00:06:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @dev, @mcast2, 0x0, 0x0, 0x0, 0x800000000118}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) 00:06:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000011c0), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r2) 00:06:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000011c0), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r2) 00:06:57 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:06:57 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000700)=ANY=[], 0xfffffff5) close(r1) memfd_create(&(0x7f0000000040)="222547504c005fd5cdeb3b3b663f8d3482fcfd1039bb51abd89c7f57a9", 0x0) splice(r0, 0x0, r1, 0x0, 0x400000000002, 0x0) 00:06:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xfffffffffffffd8b, 0x0, 0x0, 0x0) 00:06:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000011c0), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r2) 00:06:57 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000140)="1f0000000104ff40fd4354c007110000f305010000000100010423a6ffdf00", 0x1f) pause() bind$inet(0xffffffffffffffff, 0x0, 0x0) 00:06:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000011c0), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r2) 00:06:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000011c0), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r2) 00:06:58 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000700)=ANY=[], 0xfffffff5) close(r1) memfd_create(&(0x7f0000000040)="222547504c005fd5cdeb3b3b663f8d3482fcfd1039bb51abd89c7f57a9", 0x0) splice(r0, 0x0, r1, 0x0, 0x400000000002, 0x0) [ 692.457603] audit: type=1400 audit(1544314018.438:254): avc: denied { create } for pid=19181 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 692.537630] audit: type=1400 audit(1544314018.518:255): avc: denied { create } for pid=19181 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 00:06:58 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008914, &(0x7f00000004c0)="ce01000000e49d18cec9562255e1cb025c00d4d700") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x445}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff1500000000000000fd39000000000000000000800000000000e0000001000000000000000000e535000000000400000000000000ff00c80000030006000000000002000003e80000bb000000000000000003000500000000000000000000002b01002000000000"], 0x7e}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) r1 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r4 = socket$inet6(0xa, 0x0, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x4000c6) openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = gettid() perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x2, 0x93ce, 0xace, 0x0, 0x0, 0x4000, 0x4, 0x7f, 0x3, 0x6, 0x80000000, 0xffff, 0xce8a, 0x80000001, 0xb5, 0x9265, 0x8, 0x2, 0x800, 0x1, 0x6, 0x5, 0x6, 0xffffffff, 0x20000005, 0x20, 0x5, 0x0, 0xfff, 0x0, 0x0, 0x5, 0x0, 0x1, 0xf29c, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000480), 0xa}, 0x0, 0x3, 0x1f, 0x0, 0x0, 0xfffffffffffffffb, 0x101}, r6, 0x0, 0xffffffffffffffff, 0xa) ioctl$sock_ifreq(0xffffffffffffffff, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000440)={"4854ff020900000007000000000000000000000000000000000000000a"}, &(0x7f0000000340)=0xfffffffffffffe40) dup(r1) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x5) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r2, &(0x7f0000000180), 0x8) 00:06:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @dev, @mcast2, 0x0, 0x0, 0x0, 0x800000000118}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) 00:06:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000011c0), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r2) 00:06:59 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpriority(0x1, r0) 00:06:59 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000700)=ANY=[], 0xfffffff5) close(r1) memfd_create(&(0x7f0000000040)="222547504c005fd5cdeb3b3b663f8d3482fcfd1039bb51abd89c7f57a9", 0x0) splice(r0, 0x0, r1, 0x0, 0x400000000002, 0x0) 00:06:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}, 0x20) 00:06:59 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 00:06:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x100000004e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000007c0)="606e4e59be899542e7d36ac17957d7150942a440b9b3a513dfe4b8e2676415672c4bbc76e920ca0d6507559f955a547af09380d022d074350ff402415ab7f1ab8655197f0e9537ac63a6a8afa63c007d7ceac2a955d2f1d18148294e58061549442a31fb25c7c45c1e47ec41a7fe7a63f293cc152d6642464b89e5d8dd9c17f9469062925118236d72494f4df79acc65f1f865e95ec68fc47cc4ebfb1bdf52482b7f9cdeb934081f50c4067287571752050fb387967f81138337ed11c3a8b86405f4ce1e41e58bf4d4", 0xc9}], 0x1}}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES64], 0x1}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002540)=""/200, 0xc8}], 0x1}}], 0x1, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/145, 0x91) 00:07:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='stack\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bfe2566c845a0c58b400", "ee52c10d1e72a9430c222985fcedff747a3131991a00000800000004002000"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:07:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x41) r2 = memfd_create(&(0x7f0000000240)='dec ', 0x0) ftruncate(r2, 0x40005) sendfile(r0, r2, 0x0, 0x2000000000005) 00:07:00 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0x102fe) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x0, 0x2, 0x3}) 00:07:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='stack\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bfe2566c845a0c58b400", "ee52c10d1e72a9430c222985fcedff747a3131991a00000800000004002000"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 695.493179] syz-executor5 (19244) used greatest stack depth: 22848 bytes left [ 695.518750] syz-executor5 (19253) used greatest stack depth: 22288 bytes left 00:07:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x800000000006) ioctl$LOOP_CHANGE_FD(r0, 0x127f, 0xffffffffffffffff) 00:07:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @dev, @mcast2, 0x0, 0x0, 0x0, 0x800000000118}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) 00:07:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x41) r2 = memfd_create(&(0x7f0000000240)='dec ', 0x0) ftruncate(r2, 0x40005) sendfile(r0, r2, 0x0, 0x2000000000005) 00:07:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x2100, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000003c0)={0xf, 0x8000, 0x2}) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000100)}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = getpgid(0x0) prlimit64(r3, 0x0, &(0x7f0000000080), 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000400)={0x14, 0x49, 0x1, {0x40, 0x4, 0x3}}, 0x14) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000240)=""/240, &(0x7f0000000040)=0xf0) fsetxattr$security_capability(r0, &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v1={0x1000000, [{0xffff, 0x2701}]}, 0xc, 0x1) r6 = dup(r4) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4) r7 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r7, 0x10099ba) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r6, r7, 0x0, 0x1000000000000fe) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 00:07:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x41) r2 = memfd_create(&(0x7f0000000240)='dec ', 0x0) ftruncate(r2, 0x40005) sendfile(r0, r2, 0x0, 0x2000000000005) 00:07:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='stack\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bfe2566c845a0c58b400", "ee52c10d1e72a9430c222985fcedff747a3131991a00000800000004002000"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:07:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000300)=""/95) rmdir(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) sendfile(r0, r5, 0x0, 0x2) ioctl(r6, 0x8912, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r5, 0x40086610, &(0x7f0000000140)=0xff) write$selinux_load(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8cffb578080000005345204c564b757816000002abf6ff824f00400000000000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef6e53b3bdff2777626786000000000000e85751c5e4e38a4572d7c600000080e7232bd98c942555b72a16d48815b0c763d0281ac13df93bea9e81bdc4e600"], 0x7a) sendfile(r1, r6, 0x0, 0xa5cc554) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000180)) 00:07:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x41) r2 = memfd_create(&(0x7f0000000240)='dec ', 0x0) ftruncate(r2, 0x40005) sendfile(r0, r2, 0x0, 0x2000000000005) 00:07:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x41) r2 = memfd_create(&(0x7f0000000240)='dec ', 0x0) ftruncate(r2, 0x40005) sendfile(r0, r2, 0x0, 0x2000000000005) 00:07:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='stack\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bfe2566c845a0c58b400", "ee52c10d1e72a9430c222985fcedff747a3131991a00000800000004002000"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:07:03 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x68, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @ipv4}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @remote}}, @FRA_SRC={0x14, 0x2, @ipv4={[], [], @loopback}}]}, 0x68}}, 0x0) [ 697.647055] SELinux: policydb magic number 0x78b5ff8c does not match expected magic number 0xf97cff8c 00:07:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x41) r2 = memfd_create(&(0x7f0000000240)='dec ', 0x0) ftruncate(r2, 0x40005) sendfile(r0, r2, 0x0, 0x2000000000005) [ 698.203995] SELinux: policydb magic number 0x78b5ff8c does not match expected magic number 0xf97cff8c 00:07:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 00:07:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @dev, @mcast2, 0x0, 0x0, 0x0, 0x800000000118}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) 00:07:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x41) r2 = memfd_create(&(0x7f0000000240)='dec ', 0x0) ftruncate(r2, 0x40005) sendfile(r0, r2, 0x0, 0x2000000000005) 00:07:06 executing program 2: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x1000000) 00:07:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000300)=""/95) rmdir(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) sendfile(r0, r5, 0x0, 0x2) ioctl(r6, 0x8912, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r5, 0x40086610, &(0x7f0000000140)=0xff) write$selinux_load(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8cffb578080000005345204c564b757816000002abf6ff824f00400000000000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef6e53b3bdff2777626786000000000000e85751c5e4e38a4572d7c600000080e7232bd98c942555b72a16d48815b0c763d0281ac13df93bea9e81bdc4e600"], 0x7a) sendfile(r1, r6, 0x0, 0xa5cc554) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000180)) 00:07:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000300)=""/95) rmdir(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) sendfile(r0, r5, 0x0, 0x2) ioctl(r6, 0x8912, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r5, 0x40086610, &(0x7f0000000140)=0xff) write$selinux_load(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8cffb578080000005345204c564b757816000002abf6ff824f00400000000000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef6e53b3bdff2777626786000000000000e85751c5e4e38a4572d7c600000080e7232bd98c942555b72a16d48815b0c763d0281ac13df93bea9e81bdc4e600"], 0x7a) sendfile(r1, r6, 0x0, 0xa5cc554) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000180)) 00:07:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r2, &(0x7f0000001400)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) dup2(r1, r2) write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:07:06 executing program 2: r0 = gettid() r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000002c0)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) readv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/182, 0xb6}], 0x1) close(r1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) tkill(r0, 0x1000000000016) 00:07:06 executing program 1: add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) [ 700.744343] SELinux: policydb magic number 0x78b5ff8c does not match expected magic number 0xf97cff8c [ 700.859279] SELinux: policydb magic number 0x78b5ff8c does not match expected magic number 0xf97cff8c 00:07:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 00:07:07 executing program 1: r0 = memfd_create(&(0x7f00000000c0)="2365a782772400", 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7e00274c0b8504"], 0x7) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket(0x18, 0x0, 0x4) connect(r1, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xe) 00:07:07 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair(0x5, 0x0, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x11) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000300)=0xc) recvfrom$packet(r2, &(0x7f0000000140)=""/167, 0xa7, 0x101, &(0x7f0000000340)={0x11, 0x1, r5, 0x1, 0x7ff, 0x6, @dev={[], 0x1e}}, 0x14) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000380)={@remote, @dev, 0x0}, &(0x7f00000003c0)=0xffffffffffffff48) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={r6, @multicast1, @multicast2}, 0xc) io_setup(0x0, &(0x7f00000000c0)=0x0) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="d9f86abdd33cdf4d2fb8ef68481b20e5", 0x10, 0xcda, 0x0, 0x2}, &(0x7f0000000280)) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x1) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) write$binfmt_aout(r8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x339) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 00:07:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000300)=""/95) rmdir(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) sendfile(r0, r5, 0x0, 0x2) ioctl(r6, 0x8912, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r5, 0x40086610, &(0x7f0000000140)=0xff) write$selinux_load(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8cffb578080000005345204c564b757816000002abf6ff824f00400000000000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef6e53b3bdff2777626786000000000000e85751c5e4e38a4572d7c600000080e7232bd98c942555b72a16d48815b0c763d0281ac13df93bea9e81bdc4e600"], 0x7a) sendfile(r1, r6, 0x0, 0xa5cc554) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000180)) [ 702.672467] SELinux: policydb magic number 0x78b5ff8c does not match expected magic number 0xf97cff8c 00:07:09 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000300)=""/95) rmdir(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) sendfile(r0, r5, 0x0, 0x2) ioctl(r6, 0x8912, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r5, 0x40086610, &(0x7f0000000140)=0xff) write$selinux_load(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8cffb578080000005345204c564b757816000002abf6ff824f00400000000000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef6e53b3bdff2777626786000000000000e85751c5e4e38a4572d7c600000080e7232bd98c942555b72a16d48815b0c763d0281ac13df93bea9e81bdc4e600"], 0x7a) sendfile(r1, r6, 0x0, 0xa5cc554) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000180)) 00:07:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000300)=""/95) rmdir(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) sendfile(r0, r5, 0x0, 0x2) ioctl(r6, 0x8912, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r5, 0x40086610, &(0x7f0000000140)=0xff) write$selinux_load(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8cffb578080000005345204c564b757816000002abf6ff824f00400000000000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef6e53b3bdff2777626786000000000000e85751c5e4e38a4572d7c600000080e7232bd98c942555b72a16d48815b0c763d0281ac13df93bea9e81bdc4e600"], 0x7a) sendfile(r1, r6, 0x0, 0xa5cc554) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000180)) 00:07:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000008c0)='./bus\x00', 0x40) fcntl$setstatus(r1, 0x4, 0x6100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@ipv4}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getgid() lstat(&(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80)) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$selinux_load(0xffffffffffffffff, 0x0, 0xffffffffffffff00) sendfile(r1, r2, 0x0, 0xa5cc554) clock_gettime(0x0, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000600)=[{{0x0, 0x7530}, 0x15}, {{0x0, 0x2710}, 0x0, 0x2}, {{}, 0x15, 0x0, 0xa2}, {{}, 0x1f, 0x4, 0x9}, {{0x77359400}, 0x0, 0xfa9, 0x4}, {{r5, r6/1000+10000}, 0x2, 0x200, 0x5}], 0x90) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x6, 0x42f, [0x0, 0x20000b00, 0x20000c60, 0x20000ee0], 0x0, &(0x7f0000000440), &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"]}, 0x4a7) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) accept(r2, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000340)=0x80) 00:07:09 executing program 4: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) removexattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 00:07:09 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000380)={@rand_addr=0x7ff, @dev={0xac, 0x14, 0x14, 0x20}, @loopback}, 0xc) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {0x0}, {&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/205, 0xcd}, {&(0x7f0000000900)=""/149, 0x95}], 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @remote}, &(0x7f0000000340)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) write(r2, &(0x7f00000000c0)="1a677bc48ca443a093529aa7f372afb88ce21c87136a2cbddf34fc3d7b3a98f710e8838be6f62c88fbb1133e4a14e3f4beff143e414221de6f89214dfbb11369e4e212b9d91d0e6aff9202f9d199480c099bb569d302aab44f48ce0ca0f91ed5c33cde79fab055dc94d37cf7257e86adf1051163eea64a", 0x77) r3 = fcntl$getown(r1, 0x9) sched_rr_get_interval(r3, &(0x7f0000000240)) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000002c0)) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f00000004c0)='net/netlink\x00') ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000440)={'ip6gretap0\x00', {0x2, 0x4e22, @local}}) 00:07:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair(0x5, 0x0, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x11) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000300)=0xc) recvfrom$packet(r2, &(0x7f0000000140)=""/167, 0xa7, 0x101, &(0x7f0000000340)={0x11, 0x1, r5, 0x1, 0x7ff, 0x6, @dev={[], 0x1e}}, 0x14) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000380)={@remote, @dev, 0x0}, &(0x7f00000003c0)=0xffffffffffffff48) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={r6, @multicast1, @multicast2}, 0xc) io_setup(0x0, &(0x7f00000000c0)=0x0) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="d9f86abdd33cdf4d2fb8ef68481b20e5", 0x10, 0xcda, 0x0, 0x2}, &(0x7f0000000280)) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x1) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) write$binfmt_aout(r8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x339) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) [ 704.359153] SELinux: policydb magic number 0x78b5ff8c does not match expected magic number 0xf97cff8c [ 704.442467] SELinux: policydb magic number 0x78b5ff8c does not match expected magic number 0xf97cff8c 00:07:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x6, &(0x7f0000003780)) 00:07:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000008c0)='./bus\x00', 0x40) fcntl$setstatus(r1, 0x4, 0x6100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@ipv4}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getgid() lstat(&(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80)) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$selinux_load(0xffffffffffffffff, 0x0, 0xffffffffffffff00) sendfile(r1, r2, 0x0, 0xa5cc554) clock_gettime(0x0, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000600)=[{{0x0, 0x7530}, 0x15}, {{0x0, 0x2710}, 0x0, 0x2}, {{}, 0x15, 0x0, 0xa2}, {{}, 0x1f, 0x4, 0x9}, {{0x77359400}, 0x0, 0xfa9, 0x4}, {{r5, r6/1000+10000}, 0x2, 0x200, 0x5}], 0x90) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x6, 0x42f, [0x0, 0x20000b00, 0x20000c60, 0x20000ee0], 0x0, &(0x7f0000000440), &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"]}, 0x4a7) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) accept(r2, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000340)=0x80) 00:07:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000), 0xc, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb4, 0x2}}, 0xb8}}, 0x0) 00:07:11 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000300)=""/95) rmdir(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) sendfile(r0, r5, 0x0, 0x2) ioctl(r6, 0x8912, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r5, 0x40086610, &(0x7f0000000140)=0xff) write$selinux_load(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8cffb578080000005345204c564b757816000002abf6ff824f00400000000000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef6e53b3bdff2777626786000000000000e85751c5e4e38a4572d7c600000080e7232bd98c942555b72a16d48815b0c763d0281ac13df93bea9e81bdc4e600"], 0x7a) sendfile(r1, r6, 0x0, 0xa5cc554) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000180)) 00:07:11 executing program 4: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8007800, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21024, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@context={'context', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) 00:07:11 executing program 0: r0 = getpgrp(0x0) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xffffffffffffff7e}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xffffffff}) rt_sigtimedwait(&(0x7f0000000200)={0x7fffffffffffff66}, &(0x7f0000a72ff0), 0x0, 0x8) 00:07:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(r0, 0x0, 0x2) 00:07:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xa) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000140), 0x8) 00:07:12 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000008c0)='./bus\x00', 0x40) fcntl$setstatus(r1, 0x4, 0x6100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@ipv4}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getgid() lstat(&(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80)) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$selinux_load(0xffffffffffffffff, 0x0, 0xffffffffffffff00) sendfile(r1, r2, 0x0, 0xa5cc554) clock_gettime(0x0, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000600)=[{{0x0, 0x7530}, 0x15}, {{0x0, 0x2710}, 0x0, 0x2}, {{}, 0x15, 0x0, 0xa2}, {{}, 0x1f, 0x4, 0x9}, {{0x77359400}, 0x0, 0xfa9, 0x4}, {{r5, r6/1000+10000}, 0x2, 0x200, 0x5}], 0x90) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x6, 0x42f, [0x0, 0x20000b00, 0x20000c60, 0x20000ee0], 0x0, &(0x7f0000000440), &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"]}, 0x4a7) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) accept(r2, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000340)=0x80) [ 706.276556] SELinux: policydb magic number 0x78b5ff8c does not match expected magic number 0xf97cff8c 00:07:12 executing program 0: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000400)={0x0, 0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d000010000000000000000000000008001a00000003000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000300eaffffff0000020000009807d7060000000000000000030005000000000002000000ac14ffbb00000000000000000000000000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007840)=[{{&(0x7f0000000040)=@pppol2tpv3, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x10000000000000ce}}], 0x1, 0x0, &(0x7f00000003c0)) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 00:07:12 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, 0x0) [ 707.252726] binder: 19453:19457 ioctl c018620c 0 returned -14 00:07:13 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair(0x5, 0x0, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x11) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000300)=0xc) recvfrom$packet(r2, &(0x7f0000000140)=""/167, 0xa7, 0x101, &(0x7f0000000340)={0x11, 0x1, r5, 0x1, 0x7ff, 0x6, @dev={[], 0x1e}}, 0x14) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000380)={@remote, @dev, 0x0}, &(0x7f00000003c0)=0xffffffffffffff48) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={r6, @multicast1, @multicast2}, 0xc) io_setup(0x0, &(0x7f00000000c0)=0x0) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="d9f86abdd33cdf4d2fb8ef68481b20e5", 0x10, 0xcda, 0x0, 0x2}, &(0x7f0000000280)) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x1) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) write$binfmt_aout(r8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x339) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 00:07:13 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) fchownat(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) 00:07:13 executing program 0: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000400)={0x0, 0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d000010000000000000000000000008001a00000003000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000300eaffffff0000020000009807d7060000000000000000030005000000000002000000ac14ffbb00000000000000000000000000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007840)=[{{&(0x7f0000000040)=@pppol2tpv3, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x10000000000000ce}}], 0x1, 0x0, &(0x7f00000003c0)) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 00:07:13 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, 0x0) 00:07:13 executing program 3: socketpair(0x0, 0x4, 0x1000, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="44c72403559c3f0c3484096511cdb61d183872a05a2a45841f2099feaf94d07b89e77c90ef1ebe73cbf206530c84d259a0a6af866a09603f37f927296e68eb6b37582e55625b4a36091b2d8fa47dc79ab5aeb1100db7c6f3e6fb02cce197fb87bd24aea7d2017ee3a2e7472fc02069e1e3dd7126cc0a0dbee3a2757caa75af23"], 0x80) sendfile(r1, r2, 0x0, 0xa5cc554) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) 00:07:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000008c0)='./bus\x00', 0x40) fcntl$setstatus(r1, 0x4, 0x6100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@ipv4}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getgid() lstat(&(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80)) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$selinux_load(0xffffffffffffffff, 0x0, 0xffffffffffffff00) sendfile(r1, r2, 0x0, 0xa5cc554) clock_gettime(0x0, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000600)=[{{0x0, 0x7530}, 0x15}, {{0x0, 0x2710}, 0x0, 0x2}, {{}, 0x15, 0x0, 0xa2}, {{}, 0x1f, 0x4, 0x9}, {{0x77359400}, 0x0, 0xfa9, 0x4}, {{r5, r6/1000+10000}, 0x2, 0x200, 0x5}], 0x90) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x6, 0x42f, [0x0, 0x20000b00, 0x20000c60, 0x20000ee0], 0x0, &(0x7f0000000440), &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"]}, 0x4a7) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) accept(r2, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000340)=0x80) [ 708.067057] binder: 19466:19471 ioctl c018620c 0 returned -14 00:07:14 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, 0x0) 00:07:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_settime(0xffffffffa4104230, &(0x7f00000001c0)={0x77359400}) 00:07:14 executing program 0: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000400)={0x0, 0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d000010000000000000000000000008001a00000003000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000300eaffffff0000020000009807d7060000000000000000030005000000000002000000ac14ffbb00000000000000000000000000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007840)=[{{&(0x7f0000000040)=@pppol2tpv3, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x10000000000000ce}}], 0x1, 0x0, &(0x7f00000003c0)) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 00:07:14 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, 0x0) 00:07:14 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x0, 0xfffffffffffffffc}) 00:07:15 executing program 0: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000400)={0x0, 0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d000010000000000000000000000008001a00000003000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000300eaffffff0000020000009807d7060000000000000000030005000000000002000000ac14ffbb00000000000000000000000000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007840)=[{{&(0x7f0000000040)=@pppol2tpv3, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x10000000000000ce}}], 0x1, 0x0, &(0x7f00000003c0)) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) [ 709.574012] binder: 19508:19510 ioctl c018620c 0 returned -14 00:07:16 executing program 4: socketpair(0x0, 0x4, 0x1000, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="44c72403559c3f0c3484096511cdb61d183872a05a2a45841f2099feaf94d07b89e77c90ef1ebe73cbf206530c84d259a0a6af866a09603f37f927296e68eb6b37582e55625b4a36091b2d8fa47dc79ab5aeb1100db7c6f3e6fb02cce197fb87bd24aea7d2017ee3a2e7472fc02069e1e3dd7126cc0a0dbee3a2757caa75af23"], 0x80) sendfile(r1, r2, 0x0, 0xa5cc554) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) 00:07:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair(0x5, 0x0, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x11) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000300)=0xc) recvfrom$packet(r2, &(0x7f0000000140)=""/167, 0xa7, 0x101, &(0x7f0000000340)={0x11, 0x1, r5, 0x1, 0x7ff, 0x6, @dev={[], 0x1e}}, 0x14) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000380)={@remote, @dev, 0x0}, &(0x7f00000003c0)=0xffffffffffffff48) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={r6, @multicast1, @multicast2}, 0xc) io_setup(0x0, &(0x7f00000000c0)=0x0) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="d9f86abdd33cdf4d2fb8ef68481b20e5", 0x10, 0xcda, 0x0, 0x2}, &(0x7f0000000280)) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x1) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) write$binfmt_aout(r8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x339) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 00:07:16 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f00000012c0)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}]) 00:07:16 executing program 2: dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000740)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) lseek(r2, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) chmod(&(0x7f0000000880)='./file0\x00', 0x0) 00:07:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003ff) write$cgroup_type(r2, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r2, 0x3, 0x7fff, 0x8000) fallocate(r2, 0x3, 0x5e89, 0xfff9) 00:07:16 executing program 3: socketpair(0x0, 0x4, 0x1000, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="44c72403559c3f0c3484096511cdb61d183872a05a2a45841f2099feaf94d07b89e77c90ef1ebe73cbf206530c84d259a0a6af866a09603f37f927296e68eb6b37582e55625b4a36091b2d8fa47dc79ab5aeb1100db7c6f3e6fb02cce197fb87bd24aea7d2017ee3a2e7472fc02069e1e3dd7126cc0a0dbee3a2757caa75af23"], 0x80) sendfile(r1, r2, 0x0, 0xa5cc554) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) 00:07:16 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) 00:07:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003ff) write$cgroup_type(r2, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r2, 0x3, 0x7fff, 0x8000) fallocate(r2, 0x3, 0x5e89, 0xfff9) 00:07:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000074ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140)='hfs\x00', 0x0, 0x0) 00:07:17 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) 00:07:17 executing program 3: socketpair(0x0, 0x4, 0x1000, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="44c72403559c3f0c3484096511cdb61d183872a05a2a45841f2099feaf94d07b89e77c90ef1ebe73cbf206530c84d259a0a6af866a09603f37f927296e68eb6b37582e55625b4a36091b2d8fa47dc79ab5aeb1100db7c6f3e6fb02cce197fb87bd24aea7d2017ee3a2e7472fc02069e1e3dd7126cc0a0dbee3a2757caa75af23"], 0x80) sendfile(r1, r2, 0x0, 0xa5cc554) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) 00:07:17 executing program 4: socketpair(0x0, 0x4, 0x1000, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="44c72403559c3f0c3484096511cdb61d183872a05a2a45841f2099feaf94d07b89e77c90ef1ebe73cbf206530c84d259a0a6af866a09603f37f927296e68eb6b37582e55625b4a36091b2d8fa47dc79ab5aeb1100db7c6f3e6fb02cce197fb87bd24aea7d2017ee3a2e7472fc02069e1e3dd7126cc0a0dbee3a2757caa75af23"], 0x80) sendfile(r1, r2, 0x0, 0xa5cc554) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) 00:07:19 executing program 3: socketpair(0x0, 0x4, 0x1000, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="44c72403559c3f0c3484096511cdb61d183872a05a2a45841f2099feaf94d07b89e77c90ef1ebe73cbf206530c84d259a0a6af866a09603f37f927296e68eb6b37582e55625b4a36091b2d8fa47dc79ab5aeb1100db7c6f3e6fb02cce197fb87bd24aea7d2017ee3a2e7472fc02069e1e3dd7126cc0a0dbee3a2757caa75af23"], 0x80) sendfile(r1, r2, 0x0, 0xa5cc554) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) 00:07:19 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x5, 0x0, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0x1, @loopback}, {0xa, 0x4e24, 0x8, @mcast2}, 0x5257, [0x7, 0x8, 0x0, 0x8001, 0x6, 0xfffffffffffffffe, 0x0, 0x49]}, 0x5c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) recvfrom$packet(r2, &(0x7f0000000140)=""/167, 0xa7, 0x101, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0x7ff, 0x6, @dev={[], 0x1e}}, 0x14) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000380)={@remote, @dev}, &(0x7f00000003c0)=0xffffffffffffff48) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000300)=0x8000, 0x4) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000005c0), 0x4) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x1) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) write$binfmt_aout(r5, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f0108830c0200004b020000080000003b00000085c4ffff0000000000000000e76b6750f8680a74d72715455c69ec8e112bdb2a8352b139976e9ed2a322319fe7f500d99a2d522cb2e2c6bd826045d2d54d821d442200925039d1456c0b74e93b3c6a8dc4371b47e3bc7fa70265c2bbe4e83d007b82ae65ebce6c3c30047731732b342724ac4c23fa867bab3254d803f11caaf23a66ca9f534d691e5c45687ca06b71037bd407480d0f7cc20d119044f161ba00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e549da8191910eaa523596d17ecb699528e30362ae5f716235ee29f2fbe8797cf96ab130774a2ef060d6a3d48fbef5e553645ebbd6afaff7c531e27fafdda3b3824abb5057682a53ab9c3a2df9da27899f535e38f6a0b38bd9142fc9e624b27b1bd918c660f3b8659e43b75d9a951675880c5b9a415e5b25674d91ec8cddea15c44a9895fd0c"], 0x339) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) 00:07:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x8000004}, 0x2f) readv(r0, &(0x7f0000000000), 0x1f5) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 00:07:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003ff) write$cgroup_type(r2, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r2, 0x3, 0x7fff, 0x8000) fallocate(r2, 0x3, 0x5e89, 0xfff9) 00:07:19 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) 00:07:19 executing program 4: socketpair(0x0, 0x4, 0x1000, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="44c72403559c3f0c3484096511cdb61d183872a05a2a45841f2099feaf94d07b89e77c90ef1ebe73cbf206530c84d259a0a6af866a09603f37f927296e68eb6b37582e55625b4a36091b2d8fa47dc79ab5aeb1100db7c6f3e6fb02cce197fb87bd24aea7d2017ee3a2e7472fc02069e1e3dd7126cc0a0dbee3a2757caa75af23"], 0x80) sendfile(r1, r2, 0x0, 0xa5cc554) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) 00:07:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003ff) write$cgroup_type(r2, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r2, 0x3, 0x7fff, 0x8000) fallocate(r2, 0x3, 0x5e89, 0xfff9) 00:07:19 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) 00:07:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0xff, @ipv4={[], [], @remote}}}, 0x0, 0x0, 0x0, "bf6ca8f14afb93fb1d361e3acb2afba72ee19095d4c7b5962107a05e75e59f066c4b3384c6f7d96d20cbc3776592cf556015420e10bdccda86464720570042b4f86a4d692149111ded8ebd9bad8ade55"}, 0xd8) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000180), 0x267) 00:07:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') read$eventfd(r0, &(0x7f0000000080), 0xff97) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x37) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x31}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:07:21 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) mkdir(&(0x7f00007b7000)='./control\x00', 0x0) signalfd(r0, &(0x7f00007b6ff8)={0x4}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) readv(r0, &(0x7f000008bfe0)=[{&(0x7f0000525000)=""/216, 0xd8}], 0x1) r3 = dup2(r1, r0) fcntl$setsig(r1, 0xa, 0x3) r4 = inotify_add_watch(r3, &(0x7f00007b4ff6)='./control\x00', 0x2000000) inotify_rm_watch(r3, r4) 00:07:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') syz_extract_tcp_res(&(0x7f00000001c0), 0x0, 0xcc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() tgkill(r1, r1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0xa2011, r0, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) setresuid(0x0, 0x0, 0x0) 00:07:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x60000000, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x18}, &(0x7f0000000100)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x400, 0x9, 0xc, &(0x7f0000000000)="4097ac51a753ef796ac74009"}) 00:07:22 executing program 5: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000001c0)=0x800000000353) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'erspan0\x00', r3}) r4 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x110007e) r5 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000003c0)={0x0, r5, 0xffffffff, 0x8, 0xfffffffffffffe00, 0xffffffffffff2502}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) write$cgroup_subtree(r5, &(0x7f0000000400)={[{0x2d, 'io'}, {0x2f, 'rdma'}, {0x2b, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2f, 'memory'}]}, 0x2a) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000c80)) setrlimit(0x7, &(0x7f0000000440)={0x0, 0x2000004cd90ba8}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000500)={0x0, {{0xa, 0x4e24, 0xb397, @ipv4={[], [], @remote}, 0x9}}}, 0x88) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) pipe(&(0x7f0000000140)={0xffffffffffffffff}) gettid() fremovexattr(r7, &(0x7f0000000200)=@known='user.syz\x00') vmsplice(r7, &(0x7f00000014c0)=[{&(0x7f00000004c0)='0', 0x1}], 0x1, 0x0) 00:07:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x60000000, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x18}, &(0x7f0000000100)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x400, 0x9, 0xc, &(0x7f0000000000)="4097ac51a753ef796ac74009"}) 00:07:22 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flistxattr(r0, &(0x7f0000002400)=""/4096, 0xda82e9044e78920a) 00:07:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r3, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 00:07:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file1/file0\x00', &(0x7f0000000240)='./file0/file0\x00') 00:07:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x60000000, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x18}, &(0x7f0000000100)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x400, 0x9, 0xc, &(0x7f0000000000)="4097ac51a753ef796ac74009"}) 00:07:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r2, 0x29, 0x20000000000006, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, 0x0, 0x0) 00:07:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file1/file0\x00', &(0x7f0000000240)='./file0/file0\x00') 00:07:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) 00:07:24 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000240)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/57, 0x39) 00:07:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x60000000, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x18}, &(0x7f0000000100)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x400, 0x9, 0xc, &(0x7f0000000000)="4097ac51a753ef796ac74009"}) 00:07:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file1/file0\x00', &(0x7f0000000240)='./file0/file0\x00') 00:07:25 executing program 5: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000001c0)=0x800000000353) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'erspan0\x00', r3}) r4 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x110007e) r5 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000003c0)={0x0, r5, 0xffffffff, 0x8, 0xfffffffffffffe00, 0xffffffffffff2502}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) write$cgroup_subtree(r5, &(0x7f0000000400)={[{0x2d, 'io'}, {0x2f, 'rdma'}, {0x2b, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2f, 'memory'}]}, 0x2a) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000c80)) setrlimit(0x7, &(0x7f0000000440)={0x0, 0x2000004cd90ba8}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000500)={0x0, {{0xa, 0x4e24, 0xb397, @ipv4={[], [], @remote}, 0x9}}}, 0x88) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) pipe(&(0x7f0000000140)={0xffffffffffffffff}) gettid() fremovexattr(r7, &(0x7f0000000200)=@known='user.syz\x00') vmsplice(r7, &(0x7f00000014c0)=[{&(0x7f00000004c0)='0', 0x1}], 0x1, 0x0) 00:07:25 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 00:07:25 executing program 4: r0 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_ivalue}) 00:07:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair(0x5, 0xfffffffffffffffc, 0xfffffffffffff3c5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000940)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x68, r1, &(0x7f0000000840)="29842ed5453155abab74312300265f375afedbd816736d78ee10db3d17f1139acf804690b835e36e876ce98bcdf110a56fd2c274ee9a784d0599c546b6830ef4a5304fb7c2d711ae2a0520e495405f1c7a3b84701655284a059c8042021c49e18938434cf54d42ed3c85699e08835a8e5aead2551ae9a467fdfff72142e4ae6c5217e40f242d1c72398fde9149c2c721f9bf954c12dcfec08e627a", 0x9b, 0x0, 0x0, 0x0, r2}]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) recvfrom$packet(r3, &(0x7f0000000140)=""/167, 0xa7, 0x101, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0x7ff, 0x6, @dev={[], 0x1e}}, 0x14) sendmmsg(r6, &(0x7f0000000600), 0x0, 0x0) io_setup(0x0, &(0x7f00000000c0)=0x0) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="d9f86abdd33cdf4d2fb8ef68481b20e5", 0x10, 0xcda, 0x0, 0x2}, 0x0) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x1) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000300)='\x00') getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) write$binfmt_aout(r8, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x36c) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) ioctl$void(r0, 0xc0045c79) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 00:07:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file1/file0\x00', &(0x7f0000000240)='./file0/file0\x00') 00:07:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140), 0xc) getsockname(0xffffffffffffff9c, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000680)=0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000006c0)={@dev={0xfe, 0x80, [], 0xb}, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x1, 0xf47, 0x5}, 0x20) fchdir(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001780)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000500)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0x0) lseek(r3, 0x0, 0x2) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) write$P9_RREADLINK(r5, &(0x7f0000001800)=ANY=[@ANYBLOB="1000a430a49b12970ea67126e086200812df194527f2ceabbaf2ccfed48100000000000000213af765a4a5721452c970f5683fbc148119de0bb5af823db3de6c0318e558864c2bbabcb286c4e66f3baaae55696fa50f6a362a4872e9e6532fcaa5cbeec3a899c22f33a6214996f7e492320511a5ee658ed3ce98a0143202c1373bdb6c31409e9230bf50b84c33aa0beb0b52b7eb600dbe1b2dbc04e9e548f21ce443cfec03f2be9134eb657f0d151cc472d55bed6ef258ff08e5"], 0xba) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r5, &(0x7f0000000300)='./file2\x00') ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000003c0)="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") mkdirat(r5, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) renameat2(r6, &(0x7f0000000080)='./file0\x00', r6, &(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) write$P9_RLINK(r4, &(0x7f00000002c0)={0x7, 0x47, 0x1}, 0x7) renameat(r5, &(0x7f0000000600)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r3, &(0x7f0000000000)='./file0\x00') readlinkat(r6, &(0x7f0000000580)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000740)=""/4096, 0xfffffffffffffdb1) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000180)='./bus\x00', 0x40) setsockopt$inet_tcp_int(r4, 0x6, 0x1f, &(0x7f00000004c0)=0xff, 0x4) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[], 0xfffffef6) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file1/file0\x00') 00:07:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8203) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) 00:07:25 executing program 3: r0 = socket$inet6(0xa, 0x100000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) sendto$inet6(r0, 0x0, 0x1, 0x7fffffe, 0x0, 0x0) 00:07:25 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000001c0)=0x6, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140), 0xcb}}], 0x40001ab, 0x8080) 00:07:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xe34, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@generic="9599c1e948580abdde3d2433838b98b7efa415705a219f2fe224c52a9a3e2cdcca707073f207e06bac92b930de33f219e7d50fef75280d53aa91495a54ef5c230c59f5e1e2b397233a2b8ba9692532a87855220f0463ec1bf62e942511ef1b304a0fc5bfb0197d66d920e23d090460e8c4261ec82a7c114c82a86822f1289244bec93a6ff1bfb85cbb3335a431ee8e73faf0342e2778d869e9b4a8d766087bde7693f5666af3ddb434c98f21ca36fdfbe41207ecb7f6a3fcf924418df85813d63e9bdeb22184b58e99040bc9e99bef0212c36ec1e944fc375be00cbdb131917ce0ef271af6d44bf9849516707a28838af90acfe798c019b217c2d60e8ab7bcaa36ec8cae7ed8ff8bcb07803e4cc493383cd145d0155bd4be491bce1ded73f61c7c0f7b14edff248197b62409681ab1f05f0ca9e562615cc050b15b6859a44b4d53292a4fa8c004df1eebcebf2229830e030f629b854378472c6b8be470c3e5d7961ba985ae5dee99115ad397ac670fe4ab2b5ae59ecf9c84c35937c03f63914a9161fee4bdf5877c1573338ea3d56cc71c2c6fbc4d36ae9df013571c5cffa89f36b27fd72a4113763051586c7e94965feff6bfa59db6c46857a13c4129c4020a05f689364e1d6913cab82a9922a634a0a4353b436b4eacd5db54dcc94c583362ec639213b8b441175034756191603df89ef554b0628a8b8092845bd28e9758e5ce8bfccb6068f052b40741c6d76b69d10077c39e6a6f20aefcd41e13a0caf064ebd29b20a41decdd8ce53071d5a1bb5abdfc58174a66d6210e76e98efbb0096dce33b9c3df6d0b85590d34d3a09eb54dad7fe605e410c4073e70c665e6a8ba19a8c4f9abf390015684519e0f70087ad47bac8c04a74e8dd1bed6856dd6d944da541c9e4dec7e3b49167c8a15f3317c7820a050740ccb49320e5ecd877dfff97820110e516fe55ae9c97bbcc1428ea721f458c2833a175d0aa4c5766a5b99c4e16eb4b56fbe1b1c9d883ade45468aadc73123bfb3b2606aecbb33da1cc2b4eaf269dea52c0224aa670811f80eb8dbcc2d522092b98b911d2bcbf80bdc6a0c3eb38b945bbea4403fc04921a526098b923cf7d678b3c20365e976f695391eeb42a86cdf2ae42320fdbab3089d07af8fcc032759938565a15548be98a3e2a2661e9b4ae4164fec95605ab625e664b77f3a02779d1a5283f92023482f1cbf8b5c48ec39392e64dde39c900ebeaf122979e0f7ebed940f07c74e4a71536f8c836724f7e4f7c07903cbcf2487e2dfed8788c9a3e7fd0201ae493f8cfa71e5e3b93f7fd0a24af0f93411ab671edc1df0b0010efc8883ac9395e82c865454602c8427653e3c9ede70e129b16e65775d23d26b7e700cc99a533f5b9fdff7c0fa1da9d7d53e2830087ca93add7f5fefc17df12f7b061ed99bf263b0c29a7b5f2e550d607a03e0d1f7bcfa9f074d7c24658970016c2ea94a39f97468a996618563cfeb0c969833810cc6d12c172fa1a190b7df538be7dea7229632d0f5d90e90d2ea60e2f2b866ba6d4c39a7b8a57c33fa3442df5fbd919e9479d97715f2df12f874fc0f64098d73697bba744bd42a89f6f32bf52e4964fcd898d3fe9299652dd24fdd1addcbc9870d392cf3a5da30a2c4442d3ec1e1f33d0e0be0d9edde9a7171db9d91f598d7a0c1e16fbacf98992f4586826f8c2c4f884fd50af919e9d8e44203986b1ab6c1822f9f24973fb1d8f263d134fffce1eac8a286bf6efa6f45ebe533fc1646d28cab1686d27ba5b65c81d6ee4f2550f5df79a41548f26debde2d773e7deaa89c182c2b0ad7bd998b15372170e3b5816f5ca35532d457a9ac12f38fc02334e2dbe25fbaf815910631d03fcbaa5a98d3c8bcf234bf273b18d3627cbd536cca45f5c683d424badd37fdea079e8ac62c1045d9f973f8dd56d2849d871064418193ea52ed5d38ba18375f14843902008f4c5be006272b7e1f5ec2cbc0c314de6e9d9a288ee1fbb8d1b845a1023581dfaa1d05255d0c73db823b6373d38467ab4cda0bc60a8cfaa04034a30381d6285ad8936d35f2f245da8fde17c8b6eed0e3ca5bc6667dec2db9a68928a887f76b7d796206a35691366772e1b004477fe63859f6e0d8ab42a5518e92825125d96cbbc6ba2dd08eadc5d011079f274265902dcef5f240d072d927f35a8bc8fb1d283f8be73120c4c0c0f30444ede07664a59849f3be0e3b14365b85c60f247016612ca1a4eea57cb2fa54b570fef2cb5d74812fd6fcf8c46fdefa04bb78c224faaf82e8d164ce617637d57d77b35d185caceb4130f017d1b56e98e5a44fa902118065aeaf3d358be6d1a163af99e57854240e97277fdcecccf958964fff645c77a3686a557b424b2414cbaeabc6d674ed9563d16384bf92a9451a9427b7976d07c7470a096baa5b846672b63213b6fbf6d237bfe221e19f6dadb9266409a0bea919c51114bfc33e16c02b4b40ee557ad6d4865a452c8db190be290c4c1153c98cac25fa3bea1de7b6227f3e6c2df3c30177fdb15e92cd92701c80a0aaa1ce6cc8e7ffbafb457b90a57dd341dd32700affb6935a41a9b34f64e45732b51ce0444799a5952ade86b1c1d3a556f40bfa09a313787273319abb038575f96bcd80c8b9ac9ad225b5759ddab8d167f099a53a6277992a85e991f96c4df46e098deb7e8940616db18c946c038ac64292b74238c334b54889929cf084fc63a89580d9b122aebce25fe37211acf4357069b27c22afe46dad5f1bfe176fdff103ac96cd74feb4c274163c7d328b879cec18c43fa7d24948daf55b5807943e7faa164798effdf661831bc22709cbeccc18e930c964d3888762ab3d4ea43acf92e390e2f18afcb57fa4606a8999246b406570c0e5d73137f9ff0501f4aae25762b3e270afcaeb5b4f911e9485c0d84bac5eb77257bd3dacb25a8061c368bd5e245c6985ba67767c2ff661e5ff4486cc5739e3ba63602b7ff39b750389c957126138d84630d3765eda329f44bf4781d4977d98930fe558e67b90c56585e87702ab2bf3b895c262a203815ba5ae51ba5f52395ce9034f242289542bbfc7a8a35f0f8c51b6275899f0d55a372e0e4fead8b1d3a7874b3626a4de92de58a8e2f0a6f8f0e92cd677d131cc3f112e7d754e455d69b60aae2920eaf5f2642e0e33a1236d413bc2c7512738f7f7182be73fd936a12e44fcbfec140c8e8903f8aff40223831c174d8c41073bf2dddeee8872b8057d3ea96756df206087e2281ffd33df3fff671c072dec9e7842026baf5d7811540e95c6996ba59c221b32b30033f26d92711067583001d702bdc61a449fda28e9a9644bbe00913cfdd77423ee969003afd9a44b3684f00d50792e8593ea40ecd651ce65cc09314a740f39c56dd730640274411e6700d8cd57a176d640f52b664a43885e63c39478f6fd442a0ff51336129207553d2d4ae8c9b7b432b271887b48b504984cc0ca6c1162498bd1ea12d560d11da1274f04e3c076034854f6839ac10ee88a8e6738ee6a5c5129a227e9c343b466f6a18838698157a67ff89a12bd6765fff97efa8b85dc808189b41b6b3b3cde36ae1dade19ad0eeee6d750a5be83794ecce94703b2575e852f9dd05f852aa0929d477db5593e3d49e1ea65289bb7b2b182c5cae0036e653385ec3b7f1b790ff24dc5e89699cfea636f5da09fedf3aaa5b4031bc048a5e65690368e8d9a9bbcc3a463c49fc46bba137dfac88bbfc43144964300eb52706507f307a3ecc984f89343e1496f48d9a052ecd4a2eaf7b10612bb376253d847fb222d799a8b28a8aa7ac0e18ca3a11a8ed5e2a2a547bdf8e4b75c2b99d58cadb652db8bc7cc89bdd808d4bc92036294644028e4b196ce76cde6ab0b00da7eb5f513c68ce3d6e8546ed01a02051c9dbf2ebb8f7d8f4e149157c1150faf1ad5af3d6836646a13e71cdf3b6b620d6947b5b36b7b098040643ed1085bef954d3857863cd471557fa02e0287d19a40b416df1b4fa807652543daf13c03383a0fc3f88d539cc2dd9f3ac28bd67daf3add5382ede6b634502902758be43219b4b9d762a88a92ea4cf0c216256c2a9cd72c33f7c3b43588cdba1df27f976a19c1b6a5dce9dca57dde067fafcab3150921dac2d6a08bb2f8df34f21a6e450cdaaba3317a9cdb92f013c9b41ec21c984e478fc3f4246cd667773d19c33eef26b0ea90637e91c104dc1ba572bb83297ac46a9aaa9440aebc1a2fd689eedabe65a54fb6bab397f0970657b7d6e5badfdd2b089daff8dd5277d5ef9a4b9c9cf4b6464b5cac0d83716c7eceb2bf4dc1dd24e7d44da7612a80936d7cf1c8727d18c0377eb43a5dda5c2899babd967140ab1ac0dfe3894fc7cac223d99f2bc10c9b20b80ddfaabca42de9da7601597f1160a62bcbb0a7e972f5532673f965b1228b6e5d57f33b2b9b068207fb03ecc068f6d60ce7de56d6418f51f3900b843b54f25561908973828cf34205d842e4ce951ceed7df1af4d316cbc70a9669be32615d88dfe92549380a3667fe67eaae021cbc1af56145632bddfc29339ff1cd5eb4862fa40e8025ba4ac4a364f501d8d686e342fb50bf0c2d920fcbcd67cb79b3f0296c7bafcd1b0f9c43a65ff6f95b72821eafbf0498906b1684d549e14f68ecf876174f7ed0e5ab2afadc12511832e6076dd642f9fc672ad3761401b68cbb94052df8becd60fb5dc3f60c6b29f6af908b41c5523ae158aeae0330da2079245457fba62b9b5ea97e638e57a60ac1f38a9116ad25d4ab9ec97823ab69289aa2a14036604536a16fe541b959bd3a6b1634ec9dfd6bc69fa8fe97060012486f42bdc8b4d67b5a2025ed1325f0b773302996c3368c9615a7688ed234fab73b1c1de5fa985518e7a3037236a39e9499d13c4a08ef0cc3ad4ca8272ec07ac8277a6039f64ec5dfaf48a80ba670e666345217e2cadf12f6c03287f96e804d612f1304487df10d14b1f68bf5fa377d99d3e77b347715228e567293bb9b4f3c8594f913b9c79ef94b5236132d36a974e913955e3b0990b46ecf32d50a07f162435f7adb71c53e2ec0e36d6af8fbd8422fa739383ebd7fe2634977f53c0c70003c31b3e57a5ef0e71518e594e09f4"]}, 0xe34}, 0x1, 0x0, 0x0, 0xc084}, 0x20008040) 00:07:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair(0x5, 0xfffffffffffffffc, 0xfffffffffffff3c5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000940)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x68, r1, &(0x7f0000000840)="29842ed5453155abab74312300265f375afedbd816736d78ee10db3d17f1139acf804690b835e36e876ce98bcdf110a56fd2c274ee9a784d0599c546b6830ef4a5304fb7c2d711ae2a0520e495405f1c7a3b84701655284a059c8042021c49e18938434cf54d42ed3c85699e08835a8e5aead2551ae9a467fdfff72142e4ae6c5217e40f242d1c72398fde9149c2c721f9bf954c12dcfec08e627a", 0x9b, 0x0, 0x0, 0x0, r2}]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) recvfrom$packet(r3, &(0x7f0000000140)=""/167, 0xa7, 0x101, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0x7ff, 0x6, @dev={[], 0x1e}}, 0x14) sendmmsg(r6, &(0x7f0000000600), 0x0, 0x0) io_setup(0x0, &(0x7f00000000c0)=0x0) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="d9f86abdd33cdf4d2fb8ef68481b20e5", 0x10, 0xcda, 0x0, 0x2}, 0x0) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x1) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000300)='\x00') getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) write$binfmt_aout(r8, &(0x7f0000000e00)=ANY=[@ANYBLOB="0f0108830c0200004b020000080000003b00000085c4ffff0000000000000000e76b6750f8680a74d72715455c69ec8e11b3ef5210482e6cb972ab2bdb2a8352b139976e9ed2a322319fe7f500d99a2d522cb2e2c6bd826045d2d54d821d442200925039d10b74e93b985e8dc4371b47e3bc7fa70265c2bbe4e83d007b82ae65ebce6c3c30047731732b342724ac4c23fa867bab3254d803f11caaf23a66ca9f534d691e5c45687ca06b71037bd407480d0f7cc20d119044d26950ca3ef23cb4b16d3561ba0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002105dd8a861a460f000000000000000000000000000000000000000000000000000000000000000000000000efffffff000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003091c2d3bc89196444dd00000000000c981f635849909129002b5afa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e549da8191910eaa523596d17ecb699528e30362ae5f716235ee29f2fbe8797cf96ab130774a2ef060d6a3d48fbef5e553645ebbd6afaff7c531e27fafdda3b3824abb5057682a53ab9c3a2df9da27899f535e38f6a0b38bd9142fc9e6ed7b74589866709d87f00cca04d1b56379bd3c2573995166ccac353f7a25820e7692d49b16e3c5153fcfe9187b45bc546002ca"], 0x36c) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) ioctl$void(r0, 0xc0045c79) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 00:07:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 721.171818] audit: type=1400 audit(1544314047.148:256): avc: denied { create } for pid=19764 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 721.322252] audit: type=1400 audit(1544314047.298:257): avc: denied { create } for pid=19764 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 00:07:27 executing program 5: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000001c0)=0x800000000353) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'erspan0\x00', r3}) r4 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x110007e) r5 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000003c0)={0x0, r5, 0xffffffff, 0x8, 0xfffffffffffffe00, 0xffffffffffff2502}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) write$cgroup_subtree(r5, &(0x7f0000000400)={[{0x2d, 'io'}, {0x2f, 'rdma'}, {0x2b, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2f, 'memory'}]}, 0x2a) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000c80)) setrlimit(0x7, &(0x7f0000000440)={0x0, 0x2000004cd90ba8}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000500)={0x0, {{0xa, 0x4e24, 0xb397, @ipv4={[], [], @remote}, 0x9}}}, 0x88) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) pipe(&(0x7f0000000140)={0xffffffffffffffff}) gettid() fremovexattr(r7, &(0x7f0000000200)=@known='user.syz\x00') vmsplice(r7, &(0x7f00000014c0)=[{&(0x7f00000004c0)='0', 0x1}], 0x1, 0x0) 00:07:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x19b) r3 = getpgrp(0xffffffffffffffff) ptrace$cont(0x9, r3, 0x100000001, 0x3) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup\x00stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') getsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = add_key(&(0x7f00000007c0)='blacklist\x00', &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840), 0x0, 0xfffffffffffffff8) r5 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r4, 0x1, r5) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r6 = syz_open_procfs(r3, &(0x7f0000000140)='net/protocols\x00') io_setup(0x6, &(0x7f00000000c0)=0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000400)={0x2}) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000740)="4150471278920bdaf28f579c3e0c9af4b551911fedbc280167c3f285dc8e07842f20f887f28a8c7d0263825d72056d14674398eaf16b690a641ac1092819799d7ab78ab224bf68c7a3", 0x49, 0x8000, 0x0, 0x3}]) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) epoll_create1(0x80000) write$selinux_user(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="73797374656d5f75306f626a5763745f723a734c6d616e6167655f73746f72655f743a73302073797374656d5f750064435e871b36e93b92b5f14f64275e27e889fdb7d333cb7726f1711f804a796aa4bb7b1e1e2ca3c931dd895c8ca0078d603833330a169822cf9db1361f024ed94b430a47c5d0bfb92097c26a315fae87d708cce2154f223d2abdc8a6056d2a3ecaa30d174b08243af6c575acd55d80d7a8e9066c08bd775a329ccd6aaa7d6b95d9c797d78e8275e88785f74fb7e42d0ce6f19adb6a0bfe5befd6568136fb666a64948091ae9be2fa07b5c7d54727aed2da000e813f830a50d53ee2739ff3aaa04bd216dbe0ead8"], 0xf6) io_setup(0x8cba, &(0x7f00000003c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x20000, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc000100000000000200000006000000ff0f0000757709a5b8f42809bd9bd67e57352cf244e89668c087469b98fae672b70475e4d33292d7da67091db8a516ab1e76212c509f6c9c8948937dbfabfc60d2892debe623e438e35ed4f8c8a66c8f54555762138e8addf0bfa373254abebe27e00348297e0ee2713fe0d24506b90696342fe81dce0035a90e6da83fd69588be6370f07b85e91739f80124033fbd5ee23a3474f8eb882318a9b1f0e421a9141f8ea16da2190557b61d69092604eeb0082ababf226b4a21c40be27fe8de728677b2f2f7a730e5e89cb2ab4155b776a2"], 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ashmem\x00', 0x400, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 00:07:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair(0x5, 0xfffffffffffffffc, 0xfffffffffffff3c5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000940)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x68, r1, &(0x7f0000000840)="29842ed5453155abab74312300265f375afedbd816736d78ee10db3d17f1139acf804690b835e36e876ce98bcdf110a56fd2c274ee9a784d0599c546b6830ef4a5304fb7c2d711ae2a0520e495405f1c7a3b84701655284a059c8042021c49e18938434cf54d42ed3c85699e08835a8e5aead2551ae9a467fdfff72142e4ae6c5217e40f242d1c72398fde9149c2c721f9bf954c12dcfec08e627a", 0x9b, 0x0, 0x0, 0x0, r2}]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) recvfrom$packet(r3, &(0x7f0000000140)=""/167, 0xa7, 0x101, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0x7ff, 0x6, @dev={[], 0x1e}}, 0x14) sendmmsg(r6, &(0x7f0000000600), 0x0, 0x0) io_setup(0x0, &(0x7f00000000c0)=0x0) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="d9f86abdd33cdf4d2fb8ef68481b20e5", 0x10, 0xcda, 0x0, 0x2}, 0x0) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x1) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000300)='\x00') getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) write$binfmt_aout(r8, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x36c) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) ioctl$void(r0, 0xc0045c79) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 00:07:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0xa, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0) 00:07:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) chroot(0x0) 00:07:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x37da}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @multicast1}}]}, 0x2c}}, 0x0) 00:07:28 executing program 4: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x88004) sendmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x3fffe83, 0x0) [ 722.068214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 00:07:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 722.221832] audit: type=1400 audit(1544314048.198:258): avc: denied { create } for pid=19776 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:07:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0xa, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0) [ 722.843049] audit: type=1400 audit(1544314048.818:259): avc: denied { set_context_mgr } for pid=19803 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 722.926265] audit: type=1400 audit(1544314048.908:260): avc: denied { create } for pid=19776 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 722.946691] binder: 19803:19812 got reply transaction with no transaction stack [ 722.946700] binder: 19803:19812 transaction failed 29201/-71, size 0-8 line 2922 [ 723.120256] binder: 19803:19806 transaction failed 29189/-22, size 0-0 line 3014 [ 723.129031] binder: 19803:19805 ioctl 40046207 0 returned -13 [ 723.196990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 723.223793] binder_alloc: binder_alloc_mmap_handler: 19803 20001000-20004000 already mapped failed -16 00:07:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair(0x5, 0xfffffffffffffffc, 0xfffffffffffff3c5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000940)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x68, r1, &(0x7f0000000840)="29842ed5453155abab74312300265f375afedbd816736d78ee10db3d17f1139acf804690b835e36e876ce98bcdf110a56fd2c274ee9a784d0599c546b6830ef4a5304fb7c2d711ae2a0520e495405f1c7a3b84701655284a059c8042021c49e18938434cf54d42ed3c85699e08835a8e5aead2551ae9a467fdfff72142e4ae6c5217e40f242d1c72398fde9149c2c721f9bf954c12dcfec08e627a", 0x9b, 0x0, 0x0, 0x0, r2}]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) recvfrom$packet(r3, &(0x7f0000000140)=""/167, 0xa7, 0x101, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0x7ff, 0x6, @dev={[], 0x1e}}, 0x14) sendmmsg(r6, &(0x7f0000000600), 0x0, 0x0) io_setup(0x0, &(0x7f00000000c0)=0x0) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="d9f86abdd33cdf4d2fb8ef68481b20e5", 0x10, 0xcda, 0x0, 0x2}, 0x0) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x1) write$cgroup_type(r8, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000300)='\x00') getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) write$binfmt_aout(r8, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x36c) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) ioctl$void(r0, 0xc0045c79) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) [ 723.283617] audit: type=1400 audit(1544314049.268:261): avc: denied { set_context_mgr } for pid=19803 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 723.351109] binder: 19803:19805 got reply transaction with no transaction stack [ 723.384919] binder: 19803:19805 transaction failed 29201/-71, size 0-8 line 2922 [ 723.476583] binder: 19803:19818 transaction failed 29189/-22, size 0-0 line 3014 [ 723.484454] binder: undelivered TRANSACTION_ERROR: 29189 [ 723.490579] binder: undelivered TRANSACTION_ERROR: 29201 [ 723.500222] binder: 19803:19812 ioctl 40046207 0 returned -13 00:07:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) [ 723.541002] binder: undelivered TRANSACTION_ERROR: 29201 [ 723.575101] binder: undelivered TRANSACTION_ERROR: 29189 00:07:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0xa, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0) [ 724.133909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 724.209145] binder: 19824:19829 transaction failed 29189/-22, size 0-0 line 3014 [ 724.360072] binder: undelivered TRANSACTION_ERROR: 29189 00:07:31 executing program 5: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000001c0)=0x800000000353) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'erspan0\x00', r3}) r4 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x110007e) r5 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000003c0)={0x0, r5, 0xffffffff, 0x8, 0xfffffffffffffe00, 0xffffffffffff2502}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) write$cgroup_subtree(r5, &(0x7f0000000400)={[{0x2d, 'io'}, {0x2f, 'rdma'}, {0x2b, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2f, 'memory'}]}, 0x2a) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000c80)) setrlimit(0x7, &(0x7f0000000440)={0x0, 0x2000004cd90ba8}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000500)={0x0, {{0xa, 0x4e24, 0xb397, @ipv4={[], [], @remote}, 0x9}}}, 0x88) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) pipe(&(0x7f0000000140)={0xffffffffffffffff}) gettid() fremovexattr(r7, &(0x7f0000000200)=@known='user.syz\x00') vmsplice(r7, &(0x7f00000014c0)=[{&(0x7f00000004c0)='0', 0x1}], 0x1, 0x0) 00:07:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 00:07:31 executing program 1: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f0000000580)) mount(&(0x7f0000000240), &(0x7f0000000200)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x14c7e310498837d1, 0x0) mount(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) mount(&(0x7f0000000240), &(0x7f0000000140)='.', &(0x7f0000000340)='ext4\x00', 0x3002480, &(0x7f0000000700)) 00:07:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0xa, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0) 00:07:31 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6(0xa, 0x1040000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f00ec08562fe8b02b434e00", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}, @IFLA_ADDRESS={0xc, 0x1, @dev}]}, 0x40}}, 0x0) [ 725.725318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 00:07:31 executing program 2: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002ffc)) [ 725.799516] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 725.865496] binder: 19844:19848 transaction failed 29189/-22, size 0-0 line 3014 [ 725.963178] binder: undelivered TRANSACTION_ERROR: 29189 00:07:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) read(r0, 0x0, 0x0) 00:07:33 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) pause() 00:07:33 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x100000008000, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000640)=0x2, 0x4) write$P9_RSTAT(r1, 0x0, 0x0) 00:07:33 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @dev, @dev, 0x0, 0x0, 0x0, 0x12e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:07:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000280)=[0x0]}}], 0x0, 0x0, 0x0}) 00:07:33 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000100)}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x1004000000016) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[]], 0x8) [ 727.455258] audit: type=1400 audit(1544314053.438:262): avc: denied { set_context_mgr } for pid=19871 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 727.576717] binder: 19871:19885 got reply transaction with no transaction stack [ 727.634700] binder: 19871:19884 transaction failed 29189/-22, size 0-0 line 3014 [ 727.635058] binder: 19871:19885 transaction failed 29201/-71, size 0-8 line 2922 [ 727.650930] binder: 19871:19876 ioctl 40046207 0 returned -13 [ 727.783824] binder: undelivered TRANSACTION_ERROR: 29201 [ 727.824843] binder: undelivered TRANSACTION_ERROR: 29189 00:07:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) read(r0, 0x0, 0x0) 00:07:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="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") execveat(r1, &(0x7f0000000080)='\x00', &(0x7f0000000300), &(0x7f0000000500), 0x1000) 00:07:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc0d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 00:07:34 executing program 0: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) 00:07:34 executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) [ 728.704403] input: syz1 as /devices/virtual/input/input58 00:07:34 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x60202) write$evdev(r0, &(0x7f0000000440)=[{}], 0x18) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c9c380}, 0x0) [ 728.844675] input: syz1 as /devices/virtual/input/input59 00:07:34 executing program 0: socketpair$unix(0x1, 0x2000000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) connect$unix(r1, &(0x7f0000000200)=@abs={0x1}, 0x40) 00:07:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x11, 0x201}, 0x14}}, 0x0) 00:07:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) read(r0, 0x0, 0x0) 00:07:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc0d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 00:07:35 executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 00:07:35 executing program 5: r0 = eventfd(0x0) ioctl$void(r0, 0x5451) 00:07:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x408) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 00:07:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) read(r0, 0x0, 0x0) 00:07:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc0d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 00:07:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xdf1505a9ebb5e838}) close(r1) shutdown(r0, 0x0) 00:07:36 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x20000007}, 0x6) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) socket(0x0, 0x1, 0x0) 00:07:36 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/116, 0x74) lseek(r0, 0x4, 0x1) getdents64(r0, &(0x7f0000000280)=""/66, 0x42) 00:07:36 executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) [ 730.432820] input: syz1 as /devices/virtual/input/input61 00:07:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc0d, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 00:07:36 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000080)=@encrypted_update={'update ', 'default', 0x20, 'user:', "f7"}, 0x0, 0x0) 00:07:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) read$eventfd(r0, &(0x7f0000000000), 0x8) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:07:37 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'team0\x00', {0x2, 0x0, @broadcast}}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req={0xa70, 0x7fffffff, 0x4, 0x3}, 0x10) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x3f) fstat(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) connect$packet(r4, &(0x7f00000007c0)={0x11, 0x0, r5, 0x1, 0xef, 0x6, @dev={[], 0x11}}, 0x14) fstat(r1, &(0x7f00000002c0)) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)=[0x0, &(0x7f0000000640)="2e2540c321656d31657468316b657972696e6700", &(0x7f00000003c0)='$usermime_type\x00', &(0x7f0000000400)='io', &(0x7f0000000440)='\x00', &(0x7f0000000480)='md5sum/vboxnet0\x00'], &(0x7f0000000600)=[&(0x7f0000000500)='rdma', &(0x7f0000000540)='io', &(0x7f0000000580)='\x00']) syncfs(0xffffffffffffffff) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2f, 'pids'}, {0x0, 'rdma'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x0, 'memory'}, {0x2f, 'pids'}]}, 0x2e) 00:07:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00\x00\x00\x00\x00!\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x3d}}) [ 731.359014] input: syz1 as /devices/virtual/input/input62 00:07:37 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280), 0x8) rt_sigaction(0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 00:07:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x28, 0x29, 0x3b, "270202010000007efe8000000000000052"}], 0x28}, 0x0) 00:07:37 executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 00:07:38 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000500)=""/246) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) poll(&(0x7f0000000240)=[{}, {r0}, {r1}], 0x3, 0x0) [ 732.881484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 732.964238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 733.033082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 733.041668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 733.146852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 733.172048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 00:07:39 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0xfffffffffffffffe, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 00:07:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x0, {0x2, 0x0, @dev}, 'syz_tun\x00'}) 00:07:39 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'team0\x00', {0x2, 0x0, @broadcast}}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req={0xa70, 0x7fffffff, 0x4, 0x3}, 0x10) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x3f) fstat(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) connect$packet(r4, &(0x7f00000007c0)={0x11, 0x0, r5, 0x1, 0xef, 0x6, @dev={[], 0x11}}, 0x14) fstat(r1, &(0x7f00000002c0)) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)=[0x0, &(0x7f0000000640)="2e2540c321656d31657468316b657972696e6700", &(0x7f00000003c0)='$usermime_type\x00', &(0x7f0000000400)='io', &(0x7f0000000440)='\x00', &(0x7f0000000480)='md5sum/vboxnet0\x00'], &(0x7f0000000600)=[&(0x7f0000000500)='rdma', &(0x7f0000000540)='io', &(0x7f0000000580)='\x00']) syncfs(0xffffffffffffffff) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2f, 'pids'}, {0x0, 'rdma'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x0, 'memory'}, {0x2f, 'pids'}]}, 0x2e) 00:07:39 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x4, 0x70, 0x0, 0x0, 0xa4, 0x9, 0x0, 0xfff, 0x42030, 0x0, 0xf223, 0x100, 0x8000, 0x20, 0x6, 0x3, 0x9, 0xfffffffffffffffc, 0x7, 0x8000, 0xffffffff, 0x9e, 0x1, 0x0, 0x401, 0x80, 0x0, 0x8000000, 0x3, 0x0, 0x8d3, 0x68d, 0x4, 0x2, 0x1db, 0x6, 0x5, 0x8001, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000340), 0x7}, 0x801, 0x3, 0x1, 0x6, 0x1, 0x3, 0x7fff}, 0x0, 0xe, 0xffffffffffffff9c, 0x2) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1000) r1 = gettid() r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000300)=0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) socket$inet6(0xa, 0x800, 0x2) nanosleep(&(0x7f0000000100), &(0x7f0000000140)) tkill(r1, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000540)={0x4000000000006f4, {{0x2, 0x4e21}}}, 0x84) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 00:07:39 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) ptrace(0x4209, r1) 00:07:39 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 00:07:39 executing program 2: r0 = memfd_create(&(0x7f0000000180)="7070703000597b5a1c7d8316368759b15c87f03c9d0b9c51b6e64e9199317b08e236c108662feab21a1eb066f1ad17ce5a8423506f9cbad820317a5ed5b14a9fa6c6555bad0e0932eacbbfd8d048eff81e04e10db82606d7a4db1d29f72d9e8576c9a895c205f29063948be514b8497b783797f717201ef9199332265fe75505777703b996685a76606000e2c449ce8800e90bd1b74e9b7787104bdc827433cb58b6d53bbc0a77e76b81c23ca42d041b80", 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000140)='comm\x00') fchmod(r2, 0xffffffffffffffff) dup2(r2, r0) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 00:07:39 executing program 3: clock_settime(0x348d634f0759aefd, 0x0) 00:07:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') mknodat(r0, &(0x7f00000001c0)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./control\x00', r0, &(0x7f0000036000)='./file0\x00', 0x20000000000002) 00:07:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x31, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 00:07:40 executing program 3: r0 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 734.491778] audit: type=1400 audit(1544314060.468:263): avc: denied { setattr } for pid=20060 comm="syz-executor2" name="comm" dev="proc" ino=64471 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=0 00:07:40 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') mknodat(r0, &(0x7f00000001c0)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./control\x00', r0, &(0x7f0000036000)='./file0\x00', 0x20000000000002) 00:07:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) 00:07:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setgid(0x0) 00:07:40 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "a4695c532a8840cd6fab5414a4526f2c79702ae7d3c6501814b0f7c64161e134364c387ed362863f529d0903deef786d215310eaa4c13c41250db8794e3f0bf1be5e5d1aac357c8b6d3f43c2219de07cd2219aa3c3f251252b86ebd758fdaf0e156ad88b2e624d1e405363aebe4aa0f31ce7f0e51706273ea3b7c2cbd7d77d314a4adb25485c5e5bde9b998ae95c0581836fa841e241749ca8b55b9c4705c4a8714bd7165f7d0999adb658a9507fa64c7a41e58fc346dca457710f13e9699b0e175c7523b55aa74a54e6cccfb463a2d6a89451f85ebd962b042418e5cc266abd4f41bad18eb2639379b55aaf6e89d92d01bfd995274711f8e72094b45a4b79b0995e38b28f6633237f105a7ec050896f833de886c1d31e3c14f48ba185043d7f3ee7231fbfd2cbd31ef3454027c26940714dca40c74dda73812edb9d2adc7354ce2633aeeadbc6c14e169d994d7ac1b68043fc1b3727b2f96706da8c3f3b3771d5beba69188fca57852785f46cb373c19a3374d8c041f92ab3820d2a1eb525237cce0f7a99e0c66cf681e7ea950e062cfaf0e8d8d834da0443703ea2b63568d29cd2d7199b6ef6784e0dc8a8979841d4ddea77b998619e8eae45a9ea9bb1464ad2aa2df228e60a65b5e83ad369bc367b69a8207d8f0904b4c389c973ec705b73b666e2f298d10f57f098ed0af810231358dd151ea5bc03675bf1c9fe6ac570ad628152c8a2b8570d849c8a0460b617fabda499cd10aa0e366b8320e14b1bec56c6a96165d23b9806c0c4f86d2d4677a95a6c0e627aae99c235b06bf1432e7c81dd827e43fff9ecd24f7531ca4cfacf478f66ed764fcf53d773f4b9abe8185a661fdc9727a478f422a4bb1a7edeaf68b1e2ffa68e3068a7de077cedc7554de7a90dd2b2483a47814cc7bc85eb1a972246778db8b33bd522ec79aefa3529a000c58b570b940e55c0484386325f4097b13bf337759b0bec9321fe39e521a546a7563eb675a61ce680dee112f368343ca56332c28f44f95024ae1d77b411abe6ed80c645ce69daee65e2505d13b2d0f2f1dfe35ea7c5340c6eb70c4c34350fbcb9945e2ff4759baf55b01db49b1a7d1011eaee4811150e7f5caf7e93b0746efbc52f5733c74e27b8f4631d3852d544eef295eb18a2bf2369679c2bd9a9c5939803c6ea153d9c15dd4112789060da7b1d5b7e41b718a68a10f1d4f3e3298c16c5ab69a6c7187ddc82f2d3e8cd737afb7187dea3076359fac2b40917305d9f831b2ea698051f6560fc3cc6d24dbd148abe8e58f7d8127a9615ba027aa35aafc88debf06dab3ca38e01977102164747b0eb568009887342bbc14e274e1d12729b770887f9aea18d2ad6441849842d51d41907428ab28e36e815103360ef3c121d5a602231413d2825c0bc1a2f04614920b113e871ae1da79eb4f3a8528effc9e738c48eb2ba7843332b85bcc4d4f4cbce5090967fd6e88cd63a3d03f5c79f36ccc45be3941b3b39fb19e51298b8671930a5772ed878b057572b6db8ece6ac3f46a062a8fccd0a3b9133c0573419e3a2d5b7ab5ca40033e35918449d04428ecb9febcabeff937fba5ee21e75707de789432ec0680d3f952927ebb85e5609aebf96e8c84d88056d369493c875ce0f9e8ae5fac48912a7689914f9be71773d3f004306406cdb761c127382e70a77ac6da6aa98d57a575b218b72e2d90a66bcc130600b52765da0b017bab0e3f3e3689cf1220329ea86a03cd2f6d2b54c95364c839ebbc315153dfbc97d6961d7f0e6db56a93fa1d7afeaf479fe47ac35c92a398be921769f3f7c422cfd5ffc372f85ee3f619974b8c627568430c64d84f6aaf69a1276a7cf4cf57c057257181f15e82fd37271278da6235f34891fc702894cca12001e263d74a6e18a45bc0ebd1600987c3237804507a4923f4700ebcca3684ef35f8e4c0a8b9875cf92aec862519f5c0cdcb1d5b90710a88d39bb919c0820f25685085d179bd48ebce21c4ed697a9def3ad887eb4652ac5919ffb2ff34e78d53123e9c1ae9e50447d77560c3702d818ba1e9f848123f31ca6236457daeda138846b55017b426fd8fe0e65b5c1d8d936bda2e7e9f67ec0faaada6ebafb2440071f0c50aac2f0a5059dce32998799524bd6412c13bbee27b891de386bdc7b4a96a3e495300e82ec8d837b95b9af4b1171ea7640a27f27b3befeed4b864b5442f889b769206d6767b5815a74df960824fbcab31ab93281db2b651a838b790e52fb4c2ed29358cfe44c85f5453af706eb96ebc3140697eb914e803f3965614c15ca7fb5f6c632007fe7c56acdbdb0a197341d44f024cbe174244c0acfb1bd29f0d628d037956ad4434aa3a71ecd29556f3a23fbfc3735904c2ce5e84fd53bbc43e924940f307a81706556c45f53630c311aaae9ce4565aed2339d95bbf3107a90a3b8a6e95e8415a2ae7b8841dac758d52b7bb22cbe0ebad79900e9c7c40cca8799cca66b3571fbecf68e3ea2e3880bc2cbed1ad1dabd69593e1a968da410c5d8538fdc8199ee310a3a2b14c642e388e9f1413bb90f876aa478006554a01f6b0d41d2f5c8b7ff20d7cb79afd13f6ab3f1331a8de154a60da33aac5310c174cd54a79985772fce707da4a9ce7c5b7b60e9a9a58cd0aa4343c45d4acca17b04214076800d3ab346142ebe4bdf3c7094e73a552b1929af8c5a5603188cb751b35a98314694ecbf71c05e7997a322eec7a659c44899f7c53c8d3477d3c36f21577620813b41223aabdc72d772a2f60deb3b55bf1b5c1455371f14b0ad57af2cf6cc5b25793935d9d1fe24a2c54b5d1e45b0d69c7f697ba26595bd30e8361adee3e84b2bb08410435ae348947b1c389d5bb5a97b4654241f9b9bc07d968a6d963200e0f4eed7dc80780dadd6b570a2c5a6e9dd93712e6103bce24db15d906ba03085c06d5d963d3452f742a386661b1679f9a2cae3b9debf35c01a82a5e869cc63aabb113f6a37a3454b134108dfec975ac6192be9c699321ef5280e82e13a58d6c6f68d8d3abcde2d2fd047d8e08650c715932bedc0afbadbfad32dab976687c4d7dfc40d95399716f410d75e8d6b4e5ad85562e5604d1e414cecc3941b2e9cfd1aa2a6f31b2d509420dab96d19fe6627420c0c454f48b9263d2af216ab0858590005d57412234755b706da1a7a145fce8e007969695d00bb462270ac95fd1b483686ff6db7ffe576a8df61d80604443452236e27adbb46d4a70f2e7ccbf1735a9e9fce0f56859fa00c011742f5ded1a3631a8addbd1c412f4b404a6c7164b33f378c95395b8ce6185f90c93a9f6b33f905b03c2089554bef2991428d4d2b27e001926e714eef50ba21b7a9c048cbf2d72576a82b1145f40c9e8a2dd79684fd5c3319a8076b5f88632930542348241ee0c0b737c9474a4448d2a7d1ad2d81a5bcd4566520b678aedbb3c54cdc7dd6d03bb60af951eee9dfa5b92ebd2b6e4edf1cae7feee75c901b8fbef195921076aafce7c34732c3c67093587e25860e94028768b98c1980038fce54fb76d2531b9c3f945630ee9ec1afa2acba1e66d2ccc8b966c0470d5528cfc119c0ba14cf84c5c2a2fbcf99657c3c73ab20b32547275bba54d45eaf49e86622467e82d173d8dcaeaf5eba2a24abbdbeb5bcae6ff222d49eff8994c31297ee3f53ed0595ca90aa6315d30cffb5fdf27bd68f78ff547d4e1b443161c130cdb02f38bd0c5fc5eb86dc8a7cd9c3956d8aec7b9f4d342edffef3b819657f0891be01b974409e7a5b2ae63ac68bd7696e1b6ab1da8ee48ee955a3a12d14ce067c9c3c8b752e37c843fa9f5e9f3a1fff75ad6ff6366b34464a397bf6c74a6488912f2bb8fb379d1806a9a635d969b5818eaf11b7cd7377cc684d71f3745082efa2f49f64a057050c5f5c171b93a64dc93bdf89a181a70d38dae0731e5863c62735d7a4b28419abd22126a00fc9a5a75a74691caddc54d5426b81df6448efebc6b5105c4d648dcc23ae4f9ec7611aaef8030ea44d38952dd9cb32ddb484d3cd4e6b0174c58fd7288352f1639f78f2fd2113523462c4999a92e5d9e0ea1541c3ff9b749b5a37687f0499b1a13fb2590f7c76a1573f673ad8503845257c588c3049350e97ed93e24312ff82620d42f7229c4ac1094203e0b2022e9a6173d000e7644f867bfb7a142d4fc2e35a54de4e9e23516cc5cdce027b62ef24fc32cd10890e4f2fcf26a0f7b40039225ff19ff35ba97d9ecdb6e6d2cd211663dcc0dee1d41409f2d8410bf0bc9ceb490d292a3d97cc34ebc647354d8487b21c306e80b45dc57816924fee5e24e30915967e18a952b007da91d270af88fab23dd420fdb102387503280d436f644ced6868a2ab7ab2b1374969db72ea9c612636b858547a9bb187d2639fc30be948760bc634e572718efd0dad2fe4f6aaf44b0c5823e6854726f1d46bf41dd8691e58a77bdcb9afa63f3b0e1fbb0e5cafa7605406769d62a3f7e399e7d6c138adb02de7f4843783b0dc06f4c4539b02d565e79e81eba20609ba8a8914f74899ab42ac92b03580cfb5e457ca5d0b747a69ab9edd278cb59f7e6bd381a483d92dc866e9ccaf780b91a6f6993bab6f73d52593fe2cda79561ffbed677f5742f7844d284cfd9da34cb64b423073a4b3cff07fa6f18eea3a3ef843146870763c766d16c782517acfa89fb3d273e70dc8ba22a56f1d840c5dc87c31e4df33938c0a0dc78ea35872ae89b23290e786baf581ba3bcd995e5bddf22e6a54a6d6ae093278f6fbbd3e514cfea144d6901073e547d143c329ea2a1f97ab9aa766a2c0324890c8cb1aec1b21c88edfbb8f0d814848f31bd4a0370cc3cba4765c50975c8349da805df6fe1b67904b5aa70687e61f6bef1179e30a9b795704d11bdd7aba532bc48528574a3dfadd9f281c0cbfecd991e32c901b8d7cc57744ce5158f2259473f37e025c3f1ddae6c51cf50c2bc10bbdb17d01ac0f4807043cdadb0530283e52b6e82516603a1d7079bb45ae71c15b23a9877bc2ae706da4331b9ac9ab6e1ec8fd4041894ce2c989dc1c95802e3d443ff2cf05ec7e8348df32ae0202420dadbf6e23de917c76ab512426af82adea7a5fd72fdef2801851905ec73b83bfc8c6e63e572616a687851b8afa9e3f6c1ee357b6ffa917eeacd1005c67bced235f61436cb44dd9bf6842c8ea5ba281f77531e1d08a7a09ef0c19d2cac655bfb81ac4b7ad40083d09d9b83e7d56ada5b972cf6ee53ca693af576fe22cfde1796927aa2b54378884a93e80ecc992cf298ba99e4ad5b9d135af6e237f24c519f078b30ab1fa028438976935751d840a6078ad33f1229adf5663b5ba3c8abcff8ff30183446a62aae8a0937f8bb418e0d0c984c441271ccfc3984cdc23793346cfc36809f5ceec330e73e4f13d5a17726526b6e39931a8de1fb1d998680747f01724b117710759b9d29bf68fda8529473eaeb28182e502220a6bf5cdca4c118d2edaefe1ffac007bdb8f246407dba1f7ae277298b765e448b501e1c57e5f9e620fb6a894506d7e81fa92bd5571b32edaa3fbeb1a84e9dbd2d2e61d31bfface3ad615837f3fa95f2ed37c9e96cc045baedb79ad9c7ff37bd96798e6cce6a8d2fc8453c3a44865e1fae5e5fb551126038ef2ed4f6f7b6e186072aec9d62b8670f972eabdf12f13a1d3be51d037b25ee0552772c1fcfecccfa2bb445a34daeb79d4a1bcfbf70e718091dd72ca46069731c38775136d7256e445b58419ea845dd0f65a8a1daf88c750731a0092297c4c964005bc9cf9ec215f07c18a395b350cab70658bbb", 0xfffffffffffffdd1}, 0xfffffe48) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'team0\x00', {0x2, 0x0, @broadcast}}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req={0xa70, 0x7fffffff, 0x4, 0x3}, 0x10) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x3f) fstat(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) connect$packet(r4, &(0x7f00000007c0)={0x11, 0x0, r5, 0x1, 0xef, 0x6, @dev={[], 0x11}}, 0x14) fstat(r1, &(0x7f00000002c0)) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)=[0x0, &(0x7f0000000640)="2e2540c321656d31657468316b657972696e6700", &(0x7f00000003c0)='$usermime_type\x00', &(0x7f0000000400)='io', &(0x7f0000000440)='\x00', &(0x7f0000000480)='md5sum/vboxnet0\x00'], &(0x7f0000000600)=[&(0x7f0000000500)='rdma', &(0x7f0000000540)='io', &(0x7f0000000580)='\x00']) syncfs(0xffffffffffffffff) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2f, 'pids'}, {0x0, 'rdma'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x0, 'memory'}, {0x2f, 'pids'}]}, 0x2e) 00:07:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0x102fe) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x100000000005}) [ 735.127064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 00:07:41 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)="a5bcda869c2b797d9ba3a82b9cd09808cac1907265e970865070bc279b366c5ff99ab4a611082e69423b219c40198e3914dc991b75ba2c5bd726b08f4abb83816328459fce1dab46900c6a88ed06ec437dbe9b35e6d5572d05430ec863d5dfc808cfc49a2d9f64626f57f00e1702fb19b0b48ec24c9e195f4ac4ca675f68ec6a212355f435f387b265d78487c18a50c70bc22c02087c3c4b2061bc9230234820ffa99fb743a8363287eb29511910dfaef46d92ac8e8c64cf1ce2fe75d786c5070a017080a3de9bd139e4c7400cf412fb0b458c0a92f353fb65f920c6b80f704fa423ebc3fe8d96b58d2883d3fe57bf70c2a694afaa7f98d0d4bdcd09a8a403fb") 00:07:41 executing program 2: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00', 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r0, &(0x7f00000002c0)='./file0\x00') open(&(0x7f00000000c0)='./file1\x00', 0x101040, 0x0) listxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=""/105, 0x69) 00:07:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x20, 0x0, 0x13000000) 00:07:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect(r0, &(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x80) 00:07:41 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') mknodat(r0, &(0x7f00000001c0)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./control\x00', r0, &(0x7f0000036000)='./file0\x00', 0x20000000000002) 00:07:41 executing program 3: r0 = memfd_create(0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000090000003903000000000000060e000000000000010000000000000000000080000000000000000000000000000000000000000000000000000000000000000005000000ffffffffffffffff822d0000000000000002000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x60c, 0x3e}) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2000000000000010, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001740)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x0, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r4, &(0x7f0000000440)) fstat(r1, &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000f40)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000740)=0xe8) getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000001680)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80010}, 0xc, &(0x7f00000015c0)=[{&(0x7f0000003080)={0x10, 0x3a, 0x305, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x8804}, 0x8000) sendfile(r1, r1, 0x0, 0x2000005) keyctl$clear(0x7, 0x0) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 00:07:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000180)=0x8) r2 = dup(r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000cc0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@local, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000b80)=0x5c4) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) fstat(r1, &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@dev, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000006c0)=0xe8) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) getgid() stat(&(0x7f0000000800)='./bus\x00', &(0x7f0000000840)) stat(&(0x7f00000008c0)='./bus\x00', &(0x7f0000000900)) getgid() lstat(&(0x7f00000009c0)='./bus\x00', &(0x7f0000000a00)) lstat(&(0x7f0000000980)='./bus\x00', &(0x7f0000001e80)) lsetxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000002040)=ANY=[@ANYBLOB="1000a1b4c30e0c38530000000000aa1d241079a3c41a00000080001ed24ada46ca2d1c3866486df14c2d7b610e40503c21165359cf63e83f8d006f1db3648c86b0c797efa4a62471a394fad5775af9ff1700e7500f6451874392c28028a7d9502fa1948fa255fbe5d4be379f60d29de6461eb6f7e0cbffa5040fad4f3aa48302a8bdaa8e37ccb21138e3f882c9db1e2520e631d79a36e0be342d1e901817713c8f9ce8963f86de6738d4af20d867421c5701d0ea61a8a5cc4adb0629d20dee2e0e92115fe828d966aa00000000e00000007b77169d9135adef23f53d74e91f4a00591022c69c1cb5c7a41ed26ec488b20e488b04032ffb3c0f62e103cecf98af63bc85aeac49ecfb3cf78e17c6d4fe0341df2bc56730d8f05e417461d8db9dccfd892814e44bde5bada31ff714"], 0x1, 0x3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0)=""/31) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x8}, 0x1c) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xffffffff}) r6 = syz_open_procfs(r4, &(0x7f0000000340)='net/ip_tables_targets\x00') ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000400)) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001d80)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x6, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000d80)=""/4096}, &(0x7f0000000440)=0x78) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000300)={0x0, &(0x7f0000000200)=[{}]}) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) write$P9_RUNLINKAT(r5, &(0x7f00000003c0)={0x7, 0x4d, 0x2}, 0x7) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x4) 00:07:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 00:07:42 executing program 1: r0 = memfd_create(&(0x7f0000000040)='{]wlan1em1security\x00', 0x0) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f0000000100)=0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2e0c) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe00000000, 0x0, 0xaae}) exit(0x254) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000240), 0x4) tkill(r4, 0x39) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000300), 0x4) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) ptrace$cont(0x1f, r1, 0x9, 0x1f) write(r2, &(0x7f0000c34fff), 0xffffff0b) ptrace$setopts(0xffffffffffffffff, 0x0, 0x949a, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x138, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000002c0)={0x8, 0xffffffffffffffff, 0x400}) ioctl$TCSBRK(r3, 0x5409, 0x0) 00:07:42 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'team0\x00', {0x2, 0x0, @broadcast}}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req={0xa70, 0x7fffffff, 0x4, 0x3}, 0x10) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x3f) fstat(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) connect$packet(r4, &(0x7f00000007c0)={0x11, 0x0, r5, 0x1, 0xef, 0x6, @dev={[], 0x11}}, 0x14) fstat(r1, &(0x7f00000002c0)) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)=[0x0, &(0x7f0000000640)="2e2540c321656d31657468316b657972696e6700", &(0x7f00000003c0)='$usermime_type\x00', &(0x7f0000000400)='io', &(0x7f0000000440)='\x00', &(0x7f0000000480)='md5sum/vboxnet0\x00'], &(0x7f0000000600)=[&(0x7f0000000500)='rdma', &(0x7f0000000540)='io', &(0x7f0000000580)='\x00']) syncfs(0xffffffffffffffff) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2f, 'pids'}, {0x0, 'rdma'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x0, 'memory'}, {0x2f, 'pids'}]}, 0x2e) [ 736.747444] blk_update_request: 766 callbacks suppressed [ 736.753035] blk_update_request: I/O error, dev loop5, sector 0 [ 736.759030] buffer_io_error: 764 callbacks suppressed [ 736.764241] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 736.771925] blk_update_request: I/O error, dev loop5, sector 4 [ 736.777922] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 736.785613] blk_update_request: I/O error, dev loop5, sector 8 [ 736.791597] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 736.799289] blk_update_request: I/O error, dev loop5, sector 12 [ 736.805417] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 736.813111] blk_update_request: I/O error, dev loop5, sector 16 [ 736.819172] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 736.826864] blk_update_request: I/O error, dev loop5, sector 20 [ 736.832934] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 736.840634] blk_update_request: I/O error, dev loop5, sector 24 [ 736.846717] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 736.854424] blk_update_request: I/O error, dev loop5, sector 28 [ 736.860491] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 736.868185] blk_update_request: I/O error, dev loop5, sector 32 [ 736.874274] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 736.881936] blk_update_request: I/O error, dev loop5, sector 36 [ 736.888015] Buffer I/O error on dev loop5, logical block 9, lost async page write 00:07:42 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000640)={0x28, 0x2, 0x0, {0x5, 0x40}}, 0x28) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/rfcomm\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000600)={0x1, 0x1, 0x1a1, 0x2, 0x10000}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 00:07:43 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') mknodat(r0, &(0x7f00000001c0)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./control\x00', r0, &(0x7f0000036000)='./file0\x00', 0x20000000000002) 00:07:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 00:07:44 executing program 3: r0 = memfd_create(0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000090000003903000000000000060e000000000000010000000000000000000080000000000000000000000000000000000000000000000000000000000000000005000000ffffffffffffffff822d0000000000000002000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x60c, 0x3e}) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2000000000000010, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001740)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x0, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r4, &(0x7f0000000440)) fstat(r1, &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000f40)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000740)=0xe8) getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000001680)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80010}, 0xc, &(0x7f00000015c0)=[{&(0x7f0000003080)={0x10, 0x3a, 0x305, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x8804}, 0x8000) sendfile(r1, r1, 0x0, 0x2000005) keyctl$clear(0x7, 0x0) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 00:07:44 executing program 1: r0 = memfd_create(0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000090000003903000000000000060e000000000000010000000000000000000080000000000000000000000000000000000000000000000000000000000000000005000000ffffffffffffffff822d0000000000000002000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x60c, 0x3e}) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2000000000000010, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001740)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x0, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r4, &(0x7f0000000440)) fstat(r1, &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000f40)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000740)=0xe8) getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000001680)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80010}, 0xc, &(0x7f00000015c0)=[{&(0x7f0000003080)={0x10, 0x3a, 0x305, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x8804}, 0x8000) sendfile(r1, r1, 0x0, 0x2000005) keyctl$clear(0x7, 0x0) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 00:07:44 executing program 4: clone(0x4000414b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:07:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 00:07:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000001700)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0xfffffffffffffffe) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f00000002c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) clone(0x0, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 00:07:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000001700)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0xfffffffffffffffe) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f00000002c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) clone(0x0, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 00:07:45 executing program 1: r0 = memfd_create(0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000090000003903000000000000060e000000000000010000000000000000000080000000000000000000000000000000000000000000000000000000000000000005000000ffffffffffffffff822d0000000000000002000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x60c, 0x3e}) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2000000000000010, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001740)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x0, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r4, &(0x7f0000000440)) fstat(r1, &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000f40)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000740)=0xe8) getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000001680)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80010}, 0xc, &(0x7f00000015c0)=[{&(0x7f0000003080)={0x10, 0x3a, 0x305, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x8804}, 0x8000) sendfile(r1, r1, 0x0, 0x2000005) keyctl$clear(0x7, 0x0) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 00:07:45 executing program 4: clone(0x4000414b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:07:45 executing program 3: r0 = memfd_create(0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000090000003903000000000000060e000000000000010000000000000000000080000000000000000000000000000000000000000000000000000000000000000005000000ffffffffffffffff822d0000000000000002000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x60c, 0x3e}) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2000000000000010, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001740)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x0, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r4, &(0x7f0000000440)) fstat(r1, &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000f40)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000740)=0xe8) getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000001680)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80010}, 0xc, &(0x7f00000015c0)=[{&(0x7f0000003080)={0x10, 0x3a, 0x305, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x8804}, 0x8000) sendfile(r1, r1, 0x0, 0x2000005) keyctl$clear(0x7, 0x0) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) [ 740.345172] Dead loop on virtual device ip6tnl0, fix it urgently! 00:07:48 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000640)={0x28, 0x2, 0x0, {0x5, 0x40}}, 0x28) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/rfcomm\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000600)={0x1, 0x1, 0x1a1, 0x2, 0x10000}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 00:07:48 executing program 3: r0 = memfd_create(0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000090000003903000000000000060e000000000000010000000000000000000080000000000000000000000000000000000000000000000000000000000000000005000000ffffffffffffffff822d0000000000000002000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x60c, 0x3e}) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2000000000000010, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001740)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x0, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r4, &(0x7f0000000440)) fstat(r1, &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000f40)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000740)=0xe8) getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000001680)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80010}, 0xc, &(0x7f00000015c0)=[{&(0x7f0000003080)={0x10, 0x3a, 0x305, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x8804}, 0x8000) sendfile(r1, r1, 0x0, 0x2000005) keyctl$clear(0x7, 0x0) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 00:07:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 00:07:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000001700)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0xfffffffffffffffe) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f00000002c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) clone(0x0, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 00:07:48 executing program 4: clone(0x4000414b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:07:48 executing program 1: r0 = memfd_create(0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000090000003903000000000000060e000000000000010000000000000000000080000000000000000000000000000000000000000000000000000000000000000005000000ffffffffffffffff822d0000000000000002000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x60c, 0x3e}) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2000000000000010, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001740)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000780)={0x0, @local, 0x4e20, 0x0, 'none\x00', 0x20, 0x0, 0x7b}, 0x2c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r4, &(0x7f0000000440)) fstat(r1, &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000f40)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000740)=0xe8) getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000001680)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80010}, 0xc, &(0x7f00000015c0)=[{&(0x7f0000003080)={0x10, 0x3a, 0x305, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x8804}, 0x8000) sendfile(r1, r1, 0x0, 0x2000005) keyctl$clear(0x7, 0x0) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) [ 742.327189] Dead loop on virtual device ip6tnl0, fix it urgently! [ 742.599999] blk_update_request: 508 callbacks suppressed [ 742.605865] blk_update_request: I/O error, dev loop5, sector 0 [ 742.611844] buffer_io_error: 508 callbacks suppressed [ 742.617278] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 742.624958] blk_update_request: I/O error, dev loop5, sector 4 [ 742.630930] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 742.638962] blk_update_request: I/O error, dev loop5, sector 8 [ 742.645219] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 742.652878] blk_update_request: I/O error, dev loop5, sector 12 [ 742.659174] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 742.666861] blk_update_request: I/O error, dev loop5, sector 16 [ 742.672918] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 742.680597] blk_update_request: I/O error, dev loop5, sector 20 [ 742.686677] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 742.694374] blk_update_request: I/O error, dev loop5, sector 24 00:07:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000001700)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0xfffffffffffffffe) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f00000002c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) clone(0x0, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) [ 742.700426] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 742.708110] blk_update_request: I/O error, dev loop5, sector 28 [ 742.714178] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 742.721836] blk_update_request: I/O error, dev loop5, sector 32 [ 742.727909] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 742.735577] blk_update_request: I/O error, dev loop5, sector 36 [ 742.741635] Buffer I/O error on dev loop5, logical block 9, lost async page write 00:07:48 executing program 5: r0 = socket(0x10, 0x802, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000140)) 00:07:49 executing program 4: clone(0x4000414b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:07:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, 0x0, 0x8) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000580)="b2", 0x1}], 0x1) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) fcntl$setpipe(r0, 0x407, 0x0) tee(r2, r1, 0x5, 0x0) [ 743.340695] Dead loop on virtual device ip6tnl0, fix it urgently! 00:07:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102009ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000640)="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", 0x0) 00:07:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) unlink(&(0x7f0000001700)='./file0\x00') fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 00:07:51 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000640)={0x28, 0x2, 0x0, {0x5, 0x40}}, 0x28) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/rfcomm\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000600)={0x1, 0x1, 0x1a1, 0x2, 0x10000}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 00:07:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x48}}, 0x0) 00:07:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207200002000000a51082def2990000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090e000000030000000000000005000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000000000000009aec3f3f6110aa000000ff1700400000"], 0x70}}, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40002ee, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:07:51 executing program 5: futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 00:07:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) readlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000380)=""/224, 0xe0) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x4, &(0x7f0000000040)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) sched_setscheduler(0x0, 0x0, &(0x7f0000000140)) 00:07:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x0, 0xffffffff}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 00:07:51 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f0000000140)) r0 = getpid() mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/42) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000f) socket(0x200000000000018, 0x2, 0xf) 00:07:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={"73797a5f74756e00000000000100", 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8, 0x8, 0x284}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}}, 0x0) 00:07:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0xdf8, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 00:07:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x20000000000003}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000100), 0x14) close(r0) 00:07:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"7400ffffea0069e5a2f9ff7b9dba7f00", 0xf2b7e6098c706366}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_setup(0xaf3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="fb", 0x1}]) 00:07:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xb60088a3070f2157) getdents64(r0, &(0x7f0000004100)=""/4096, 0x1000) 00:07:56 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000640)={0x28, 0x2, 0x0, {0x5, 0x40}}, 0x28) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/rfcomm\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000600)={0x1, 0x1, 0x1a1, 0x2, 0x10000}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 00:07:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 00:07:56 executing program 0: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) 00:07:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xb60088a3070f2157) getdents64(r0, &(0x7f0000004100)=""/4096, 0x1000) 00:07:56 executing program 4: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f0000000240)="048a67ecb4149bee786ed394c0670612c0656ce60d9c389a502bdda88578ee268c13e2aeeb85fee86d2bab68e2301c5f41910e9c72762284ba9e8cbd05fffac168ed15b80ad2a141a5dfdeb2b1a6718232933641470af9106d79e044518414863d6c2f4d78dd09c8255b933bbce8b5ac531c3f5b20f0a9") mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 00:07:56 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x8000000000004, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000140)="0a55f6c3b96c25ff30") recvfrom$packet(r1, &(0x7f0000001280)=""/4096, 0x1000, 0x0, 0x0, 0x0) 00:07:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) 00:07:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xb60088a3070f2157) getdents64(r0, &(0x7f0000004100)=""/4096, 0x1000) 00:07:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0xf0ffffffffffff}}, 0xf8}}, 0x0) 00:07:56 executing program 4: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f0000000240)="048a67ecb4149bee786ed394c0670612c0656ce60d9c389a502bdda88578ee268c13e2aeeb85fee86d2bab68e2301c5f41910e9c72762284ba9e8cbd05fffac168ed15b80ad2a141a5dfdeb2b1a6718232933641470af9106d79e044518414863d6c2f4d78dd09c8255b933bbce8b5ac531c3f5b20f0a9") mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 00:07:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0xf0ffffffffffff}}, 0xf8}}, 0x0) 00:07:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000001c0)=""/69, 0xb60088a3070f2157) getdents64(r0, &(0x7f0000004100)=""/4096, 0x1000) 00:07:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"6c6f000000000400000000000000db5c", 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x313, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 00:07:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f000000a500)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000002bc0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 00:07:58 executing program 4: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f0000000240)="048a67ecb4149bee786ed394c0670612c0656ce60d9c389a502bdda88578ee268c13e2aeeb85fee86d2bab68e2301c5f41910e9c72762284ba9e8cbd05fffac168ed15b80ad2a141a5dfdeb2b1a6718232933641470af9106d79e044518414863d6c2f4d78dd09c8255b933bbce8b5ac531c3f5b20f0a9") mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 00:07:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, 0x0, 0x0, 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 00:07:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0xf0ffffffffffff}}, 0xf8}}, 0x0) 00:07:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, 0x0, 0x0, 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 00:07:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) ftruncate(r1, 0x8342) sendfile(r1, r1, &(0x7f0000317000), 0xff8) write$uinput_user_dev(r0, &(0x7f0000000d80)={'syz1\x00'}, 0x45c) 00:07:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f000000a500)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000002bc0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 00:07:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0xf0ffffffffffff}}, 0xf8}}, 0x0) 00:07:58 executing program 4: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000200)="dcd8bdb7ef62f3f700") mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f0000000240)="048a67ecb4149bee786ed394c0670612c0656ce60d9c389a502bdda88578ee268c13e2aeeb85fee86d2bab68e2301c5f41910e9c72762284ba9e8cbd05fffac168ed15b80ad2a141a5dfdeb2b1a6718232933641470af9106d79e044518414863d6c2f4d78dd09c8255b933bbce8b5ac531c3f5b20f0a9") mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 00:07:58 executing program 5: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local}, 0x1c) 00:07:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, 0x0, 0x0, 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 00:07:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) ftruncate(r1, 0x8342) sendfile(r1, r1, &(0x7f0000317000), 0xff8) write$uinput_user_dev(r0, &(0x7f0000000d80)={'syz1\x00'}, 0x45c) 00:07:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000), &(0x7f00000000c0)=0x3bc) 00:07:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f000000a500)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000002bc0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 00:07:59 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) clock_adjtime(0x0, &(0x7f0000000240)={0x8004}) 00:07:59 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 00:07:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$set_timeout(0xf, r1, 0xe3eb) keyctl$search(0xa, r0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0) 00:07:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, 0x0, 0x0, 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 00:07:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) ftruncate(r1, 0x8342) sendfile(r1, r1, &(0x7f0000317000), 0xff8) write$uinput_user_dev(r0, &(0x7f0000000d80)={'syz1\x00'}, 0x45c) 00:07:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f000000a500)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000002bc0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 00:08:00 executing program 5: io_setup(0x80000000000003, &(0x7f0000000300)=0x0) io_getevents(r0, 0x2, 0x800000000000298, &(0x7f00000000c0)=[{}, {}], &(0x7f00000001c0)={0x4000000000001, 0x7}) r1 = memfd_create(&(0x7f0000000340)="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", 0x0) r2 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 00:08:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120100020000000000000000000000"], 0x10}}, 0x0) close(r1) 00:08:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) ftruncate(r1, 0x8342) sendfile(r1, r1, &(0x7f0000317000), 0xff8) write$uinput_user_dev(r0, &(0x7f0000000d80)={'syz1\x00'}, 0x45c) 00:08:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000740)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000f0035000c00070000001900150006000000000000dc1338d54400009b84136ef75afb83de448d310000003ab8220000060cec4fab9109", 0x55}], 0x1}, 0x0) 00:08:00 executing program 0: socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000180), 0x387) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0), 0x4) [ 754.784553] IPv6: NLM_F_CREATE should be specified when creating new route [ 754.815875] IPv6: Can't replace route, no match found 00:08:00 executing program 5: r0 = memfd_create(&(0x7f0000000180)="7070703000597b5a1c7d8316368759b15c87f03c9d0b9c51b6e64e9199317b08e236c108662feab21a1eb066f1ad17ce5a8423506f9cbad820317a5ed5b14a9fa6c6555bad0e0932eacbbfd8d048eff81e04e10db82606d7a4db1d29f72d9e8576c9a895c205f29063948be514b8497b783797f717201ef9199332265fe75505777703b996685a76606000e2c449ce8800e90bd1b74e9b7787104bdc827433cb58b6d53bbc0a77e76b81c23ca42d041b80", 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000140)='comm\x00') fchmod(r2, 0xffffffffffffffff) r3 = dup2(r2, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1100) [ 755.265228] audit: type=1400 audit(1544314081.248:264): avc: denied { setattr } for pid=20582 comm="syz-executor5" name="comm" dev="proc" ino=66345 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=0 [ 755.423487] audit: type=1400 audit(1544314081.398:265): avc: denied { setattr } for pid=20582 comm="syz-executor5" name="comm" dev="proc" ino=66345 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=0 00:08:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80804531, &(0x7f0000000100)) 00:08:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000400)='keyring&^\x00', 0xffffffffffffffff) getresgid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) open(0x0, 0x0, 0x0) 00:08:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000080010000000000"], 0x10}}, 0x0) 00:08:01 executing program 2: mkdir(&(0x7f0000000040)='./0ile/\x00', 0x0) unlink(&(0x7f0000000000)='./0ile/\x00') 00:08:01 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) 00:08:01 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f0000000100), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ptrace(0x18, r0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000600)="80", 0x1}], 0x1) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000280)=""/62, &(0x7f00000002c0)=0x3e) 00:08:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x1}, 0xff7f) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r5, 0x2081fc) write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r6, 0x4, 0x40400) write$FUSE_WRITE(r6, &(0x7f0000000080)={0x18}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r4, 0x4, 0x6100) fdatasync(r3) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r3}) 00:08:02 executing program 2: perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa55, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='status\x00') preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)=""/217, 0xd9}], 0x5, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000268, 0x0) 00:08:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002a80)=@ethernet={0x1, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) 00:08:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@mcast1}, 0x1290881c40d88ab4) 00:08:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000040)='IPVS\x00', 0x7) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000140)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2106279e7000fddbdf65c784cbf6b8bfa1ed3e6718866149042f51b26c993e890e4faf9f3a755d470c629f0b53a3ce812183107f457ab54004000000d65d44c45f5ed15890d318e19ccd3463a9482f06d0f29e3f128d0d676889062e614274c0"], 0x1}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x14, 0x8, "a4072079bb8040105ef9e3854e543a0c97e7d1e44f19c63c66b4aaa6a29eb0c97f3598fdb50370759c5c21af41538dfeee809567a3b97a8f16307b2a4d932128", "66c087897c226b2923917bec67a5cd8d9cfa5d87b4d78e41993f6da50a59b8352470d7b028d01f0ca11a2d0430ee8d1e559515091638593e0a5828fae0ca31ff", "8509509a801942f77150f3da02dc5e521362f1ef5a6a61081e50c785e25cc2bb", [0x1f0000000000, 0x3]}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:08:02 executing program 2: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 00:08:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0xff7f) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) r5 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) socket$nl_route(0x10, 0x3, 0x0) [ 757.704974] audit: type=1400 audit(1544314083.688:266): avc: denied { create } for pid=20719 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:03 executing program 0: mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 00:08:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x4000000000000027, &(0x7f0000000340)={@multicast1, @loopback, @multicast2}, 0xc) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, 0x8) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000500)={0x100000001, {{0x2, 0x0, @multicast1}}}, 0x90) 00:08:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x2000000000bf99) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfff}) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r2, 0x10, 0x0, 0xcd55) 00:08:03 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(r2, &(0x7f00000002c0), 0x0, 0x0) tkill(r0, 0x1000000000016) [ 758.147484] audit: type=1400 audit(1544314084.128:267): avc: denied { create } for pid=20719 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0xdf8, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 00:08:04 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 00:08:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @loopback}}) 00:08:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x2000000000bf99) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfff}) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r2, 0x10, 0x0, 0xcd55) 00:08:04 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f00000006c0), 0xfffffea1) 00:08:06 executing program 4: unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = eventfd2(0x0, 0x0) fstat(r1, &(0x7f0000000600)) 00:08:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @loopback}}) 00:08:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000080)) 00:08:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x2000000000bf99) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfff}) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r2, 0x10, 0x0, 0xcd55) 00:08:06 executing program 3: r0 = socket$inet(0x2, 0x4000800000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) r1 = memfd_create(&(0x7f00000000c0)='dec ', 0x0) ftruncate(r1, 0x40007) sendfile(r0, r1, 0x0, 0x2000000000005) 00:08:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="4c0000001300090468fe0700000000000700ff3f03000000450001070000001419001a0000000f0000000200000800005d14dfb51571a40000f548033936b1df607382731d3943f4295d505b", 0x4c}], 0x1) 00:08:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @loopback}}) 00:08:06 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000400)=0x40) listen(r0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000380)={'ip6tnl0\x00'}) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=ANY=[], 0x0, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) bind$inet(r1, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) fcntl$getflags(r2, 0x40a) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000440)) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x36b, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) write$P9_RREADDIR(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="b900000029010007000000100100080002000000000000e205000000000000007f05002e2f627573c002000000020000000000000004000000000000000905002e2f627573800400000005000000000000000300000000000000ff05002e2f6275734004000000000000000000000008000000000000000805002e2f6275730c00000000020000000000000080000000000000000805002e2f627573240200000008000000000000000000000000000000ff05002e2f62757334abca1e83baa75ba4c4708b8f1a35ff3c"], 0xca) getpeername$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f0000000180)=0x101, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x5654807, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000600)={'NETMAP\x00'}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000340)) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8020040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x810) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000540)={{0x2, 0x4e22, @local}, {0x7}, 0x0, {0x2, 0x4e24, @loopback}, 'nr0\x00'}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000480)={'vcan0\x00', {0x2, 0x0, @broadcast}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) 00:08:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0xc001, @multicast2}]}}}]}, 0x38}}, 0x0) 00:08:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x2000000000bf99) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfff}) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r2, 0x10, 0x0, 0xcd55) 00:08:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="340000ebffff2400000000000100"], 0xe) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:08:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @loopback}}) 00:08:06 executing program 1: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x1f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:08:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)="2e2f6367726f75702e63707500d83950d1e1f4ae7bbb04df9ac71e4e0d0b0a91792b9085bf35c87549e4ae8eff8845b4f18bfe75022d9a057d21ea90ff3b51e6b5048a4335319d1fcbc19038b42f384c046120ff4a3135a0150a0a613a4408f10e1cc939df72f9d6c45084a47eea38f19961263b2fbc9eccec71c1e41adc1823f45465c32bee12e016f0ded8102c504ce7af28ebed6f2eb118d8e12446289a952618fcf088347976dab617ee768df72285104062dc0b2c726780b3ac54646df92017e36a8951", 0x200002, 0x0) fchdir(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)="04f27b041a783f9ed18e06f2152173343d197a73802111ad9bf371a279a210f8e6ce1c57927bf82ee35d5a475ecf1d0a5a9432a24ebe2ff7324d2be4be0380725c22d5fef7c3682aa2b0df2ad82e6f1e35c8c319adcad6fa", 0x58) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r0, &(0x7f0000000300)="11ed644b151dd7e916751a1d20a51ec161719cf55115e1262cbf33f631224424b2995677e6193e8d3b43", 0x2a, 0x1e) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'lo\x00', 0x1000}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e4a3) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000100)="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") r5 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000340)) r6 = getpid() getgroups(0x3, &(0x7f0000000380)=[0xffffffffffffffff, 0xee01, 0xee01]) setgid(r7) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x3, 0xfff, 0x0, 0xe582}]}, 0x10) fcntl$setsig(r2, 0xa, 0x2d) sched_setscheduler(r6, 0x5, &(0x7f0000000140)) write$P9_RFSYNC(r5, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) writev(r5, &(0x7f00000024c0)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1) [ 761.261225] audit: type=1400 audit(1544314087.238:268): avc: denied { create } for pid=20806 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000080)) 00:08:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) futex(&(0x7f0000004000), 0x400000080, 0x0, 0x0, 0x0, 0x0) 00:08:07 executing program 1: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x1f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 761.944224] audit: type=1400 audit(1544314087.928:269): avc: denied { create } for pid=20806 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) flistxattr(r0, &(0x7f0000000040)=""/206, 0xce) [ 762.044923] sock: process `syz-executor2' is using obsolete getsockopt SO_BSDCOMPAT 00:08:08 executing program 2: setrlimit(0x9, &(0x7f0000000180)) io_setup(0x3f, &(0x7f0000000100)) 00:08:09 executing program 3: pselect6(0x40, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 00:08:09 executing program 4: clone(0x802102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 00:08:09 executing program 2: setrlimit(0x9, &(0x7f0000000180)) io_setup(0x3f, &(0x7f0000000100)) 00:08:09 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x6b5659910692d25f, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, 0x4}]}, 0x3c}}, 0x0) 00:08:09 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x99}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:08:09 executing program 2: setrlimit(0x9, &(0x7f0000000180)) io_setup(0x3f, &(0x7f0000000100)) 00:08:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000480)=@ethtool_rxfh_indir={0x34}}) 00:08:10 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x99}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:08:10 executing program 2: setrlimit(0x9, &(0x7f0000000180)) io_setup(0x3f, &(0x7f0000000100)) 00:08:11 executing program 1: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x1f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:08:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000680)="0a5c2d0240316285717070") r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000dc6ffe), &(0x7f0000000000)=0xfffffffffffffdc1) 00:08:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0xfffffffffffffffb, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) dup2(r0, r1) r3 = dup(r2) recvmmsg(r3, &(0x7f0000001e40)=[{{&(0x7f0000001940)=@alg, 0x80, 0x0}}], 0x1, 0x0, 0x0) 00:08:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000480)=@ethtool_rxfh_indir={0x34}}) 00:08:11 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x2, 0x4) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:08:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000480)=@ethtool_rxfh_indir={0x34}}) 00:08:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:08:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) close(r1) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 00:08:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0xfffffffffffffffb, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) dup2(r0, r1) r3 = dup(r2) recvmmsg(r3, &(0x7f0000001e40)=[{{&(0x7f0000001940)=@alg, 0x80, 0x0}}], 0x1, 0x0, 0x0) 00:08:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) munlockall() 00:08:13 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x99}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:08:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0xfffffffffffffffb, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) dup2(r0, r1) r3 = dup(r2) recvmmsg(r3, &(0x7f0000001e40)=[{{&(0x7f0000001940)=@alg, 0x80, 0x0}}], 0x1, 0x0, 0x0) 00:08:14 executing program 1: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x1f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:08:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) 00:08:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000480)=@ethtool_rxfh_indir={0x34}}) 00:08:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0xfffffffffffffffb, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) dup2(r0, r1) r3 = dup(r2) recvmmsg(r3, &(0x7f0000001e40)=[{{&(0x7f0000001940)=@alg, 0x80, 0x0}}], 0x1, 0x0, 0x0) 00:08:14 executing program 2: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x400) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./control\x00', r1, &(0x7f0000000340)='./file0\x00') mknodat(r1, &(0x7f00000001c0)='./control\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000040)='./control\x00', r1, &(0x7f0000036000)='./file0\x00', 0x20000000000002) 00:08:14 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) setpgid(0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) 00:08:14 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)) 00:08:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYRES64], 0xffffff8a) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 00:08:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000580)="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") sendfile(r1, r0, &(0x7f0000000000), 0x7fff) sendfile(r0, r1, &(0x7f0000000080)=0x1, 0x800) 00:08:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r2) 00:08:16 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x99}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:08:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) 00:08:17 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 00:08:17 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) getitimer(0x0, &(0x7f00000000c0)) 00:08:17 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 00:08:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYRES64], 0xffffff8a) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 00:08:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key(&(0x7f00000000c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) clone(0xf11f00, 0x0, 0x0, 0x0, 0x0) 00:08:17 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) capget(&(0x7f0000000100)={0x20080522}, 0xffffffffffffffff) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@multicast1, @remote}, 0x8) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) 00:08:17 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000003c0)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) 00:08:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000000400)=0x90) 00:08:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:08:18 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000003c0)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) 00:08:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:08:19 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000003c0)="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", 0xfc) 00:08:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f000000d8c0)=[{}], 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) recvfrom(r1, &(0x7f0000003540)=""/68, 0x44, 0x0, &(0x7f0000003640)=@hci, 0x707000) 00:08:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:08:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYRES64], 0xffffff8a) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 00:08:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5]}, 0x45c) 00:08:19 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000003c0)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) [ 773.927059] input: syz1 as /devices/virtual/input/input66 00:08:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x35}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:08:20 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xb3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:08:20 executing program 4: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) read(r0, &(0x7f0000000000)=""/177, 0x10) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 00:08:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) tkill(0x0, 0x0) r2 = gettid() write$P9_RLCREATE(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 00:08:20 executing program 0: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) r2 = gettid() dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 00:08:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:08:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYRES64], 0xffffff8a) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 00:08:21 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000013) 00:08:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:08:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000040), 0x492498b, 0x7e) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 00:08:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0xfffffd92) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) flock(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) 00:08:22 executing program 4: getcwd(0xfffffffffffffffe, 0xfffffffffffffd16) 00:08:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:08:23 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003ac0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001500)=[{0xc}], 0xc}}], 0x1, 0x0) 00:08:23 executing program 3: add_key(&(0x7f0000001300)='logon\x00', &(0x7f0000001340), &(0x7f0000001380), 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) 00:08:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 00:08:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:08:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0xfffffd92) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) flock(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) 00:08:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/105, 0xffffff62) fcntl$setstatus(r0, 0x4, 0x42800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) 00:08:25 executing program 3: r0 = gettid() clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x2, 0x0, 0x0, 0x0, 0x59}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 00:08:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00007e0000)=""/4, &(0x7f0000000080)=0x4) 00:08:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000e3dffc)=0x7, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000d11000), &(0x7f0000000000)=0x4) 00:08:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt(r1, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) 00:08:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0xfffffd92) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) flock(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) 00:08:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000c00)) geteuid() getegid() syz_open_dev$rtc(&(0x7f0000004e00)='/dev/rtc#\x00', 0x1, 0x2400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005100), 0x37, 0x4004000) recvmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x1, 0x20000000000000, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x145e2fcd, 0x100000000}, 0xb) setgroups(0x20, &(0x7f00000006c0)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x286) r6 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @multicast1}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'\x00', r7}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) 00:08:26 executing program 4: ioperm(0x0, 0x5, 0x0) clone(0x0, &(0x7f00008e9000), &(0x7f00006ecffc), &(0x7f0000993ffc), &(0x7f0000f6ff3b)) 00:08:26 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)={0xffffffff80000005}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000fe0ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000deb000)) [ 780.716970] audit: type=1400 audit(1544314106.698:270): avc: denied { create } for pid=21173 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x3e, 0x105, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 00:08:27 executing program 5: pipe(&(0x7f0000000040)) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() fcntl$setstatus(r0, 0x4, 0x2400) stat(&(0x7f0000003300)='./bus\x00', &(0x7f0000003340)) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) sendfile(r0, r0, 0x0, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) 00:08:27 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0xfffffd92) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) flock(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) [ 781.290849] audit: type=1400 audit(1544314107.268:271): avc: denied { create } for pid=21173 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20020102000007) pipe(0x0) fstat(0xffffffffffffffff, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 00:08:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000004000000000000008000000000000000000000000000000000000000040000000000000000000000"], 0x2c) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000000) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) getpgid(0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000740)) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) 00:08:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a0006000000000000000001000800005c14dfb51571a4", 0x39}], 0x1) 00:08:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x5413, 0x0) 00:08:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a0006000000000000000001000800005c14dfb51571a4", 0x39}], 0x1) 00:08:28 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) [ 782.839481] audit: type=1400 audit(1544314108.818:272): avc: denied { create } for pid=21222 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 783.617507] audit: type=1400 audit(1544314109.598:273): avc: denied { create } for pid=21222 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000c00)) geteuid() getegid() syz_open_dev$rtc(&(0x7f0000004e00)='/dev/rtc#\x00', 0x1, 0x2400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005100), 0x37, 0x4004000) recvmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x1, 0x20000000000000, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x145e2fcd, 0x100000000}, 0xb) setgroups(0x20, &(0x7f00000006c0)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="160000006f000001000000000000000000000000000023194a6976dfc8cf54a73ffddc1555d37895132aed7db527ce8862cf54586985128ee3b9e480ea4c70a3348d9581750002c26bf146a56abc461ad0049fe9593011a964048f5b3f2f8f08000000000000004ef566c57435e16b240e47d608bf76a9e0c20434da271f7cd3787ff065a1606bffff54d768cc2f305fcb89611f87af19eadb9af43898699776c932e77590fc2b9e255ab5c62c022fe6435869134fbaf9a1585b2893e336a7d9ccefd605913fc67e290951ef8aa44ae100b22d95db61e03ecd378c948b590e13783c2372ca36d9feec25fa5b276bfb165213b0899e1596fc6a6dabf74daba86ce81fea3f6dce44240cd091aad6472f61066b459417b32e674a8388a35ecc534c600b6206c04291c71e147eb4c50ce99776c902c2b462b9aebe244f5d6147941281e03531beb92062dae7a927f6a17aa6104a8a52b73b46360e6807aac1531fefb99f5701d8a16c05710bd9f75c8bf83f00bec05d405044e2946d2435c284da2d16c1587324338e4c1f284a7c131c71ea39b7ca0d72ee0aa9361e4353a8f29045177c899100007a2737e7efab526e3b01418471a460a2152d75f696b65881920fae7c1c435936cfad5b7c9e712fe2637b2f0928b259b3f701c668c294816e8697435301e2b90dc632c11222f5bd0acd386e52aae0d7dbefe5ce0b3736645ca24207818c3e6b855c0c8617dc3a5e52ddeaa562dd5cfce38ef9c0d34ddffd9050a4da4f1aa471741ae50819622010880a2d08adc6e04b89fa983eb96bc086dcdb69778e1d5ba0b4ee5c4618c159bb99d000fc32156670fd0074fe5ff6a3d36035163715a7bf385bc18b3b9396775cf710804ad22032293a0fcd50dcddae34e3b21f000000000000"], 0x286) r6 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a300000000000000000010000000008000000f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7cb5b560a00000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da000100000000000200000006000000ff0f0000757709a5b8f4282abd9bd67e57352cf244e89668c087469b98fae672b70475e4d33292d7da67091db8a516ab1e76212c509f6c9c8948937dbfabfc60d2892debe623e438e35ed4f8c8a66c8f54555762138e8addf0bfa373254abebe27dff048297e0ee2713fe0d245f8940000342fe81dce0035a90e6da83fd69588be6370f07b85e91739f80124033fbd5ee23a3474f8eb882318a9b1f0e421a9141f8ea16da2190557b61d69092604eeb0082ababf226b4a21c40be27fe8de72a177b2f2f7a730"], 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @multicast1}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'\x00', r7}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) 00:08:29 executing program 0: r0 = memfd_create(&(0x7f0000000240)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0xfffffffffffffffc}, 0x0, &(0x7f00000000c0)="c483494ba49a0000000000"}, &(0x7f0000000040)={&(0x7f0000000000), {}, 0x0, &(0x7f0000000080)="c4816decef"}, 0x8, &(0x7f00005eaff8)) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_names\x00') 00:08:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6(0xa, 0x1, 0x0) inotify_init() setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x1000, 0x4) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f0000000040)=0x3) sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) close(r0) 00:08:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x18f) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:08:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a0006000000000000000001000800005c14dfb51571a4", 0x39}], 0x1) 00:08:29 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x35, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/99, 0x6}) ptrace$getregs(0xe, r0, 0x4ebd, &(0x7f0000000300)=""/217) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x6) 00:08:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a0006000000000000000001000800005c14dfb51571a4", 0x39}], 0x1) 00:08:30 executing program 0: r0 = memfd_create(&(0x7f0000000240)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0xfffffffffffffffc}, 0x0, &(0x7f00000000c0)="c483494ba49a0000000000"}, &(0x7f0000000040)={&(0x7f0000000000), {}, 0x0, &(0x7f0000000080)="c4816decef"}, 0x8, &(0x7f00005eaff8)) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_names\x00') 00:08:30 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x35, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/99, 0x6}) ptrace$getregs(0xe, r0, 0x4ebd, &(0x7f0000000300)=""/217) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x6) 00:08:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000c00)) geteuid() getegid() syz_open_dev$rtc(&(0x7f0000004e00)='/dev/rtc#\x00', 0x1, 0x2400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005100), 0x37, 0x4004000) recvmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x1, 0x20000000000000, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x145e2fcd, 0x100000000}, 0xb) setgroups(0x20, &(0x7f00000006c0)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="160000006f000001000000000000000000000000000023194a6976dfc8cf54a73ffddc1555d37895132aed7db527ce8862cf54586985128ee3b9e480ea4c70a3348d9581750002c26bf146a56abc461ad0049fe9593011a964048f5b3f2f8f08000000000000004ef566c57435e16b240e47d608bf76a9e0c20434da271f7cd3787ff065a1606bffff54d768cc2f305fcb89611f87af19eadb9af43898699776c932e77590fc2b9e255ab5c62c022fe6435869134fbaf9a1585b2893e336a7d9ccefd605913fc67e290951ef8aa44ae100b22d95db61e03ecd378c948b590e13783c2372ca36d9feec25fa5b276bfb165213b0899e1596fc6a6dabf74daba86ce81fea3f6dce44240cd091aad6472f61066b459417b32e674a8388a35ecc534c600b6206c04291c71e147eb4c50ce99776c902c2b462b9aebe244f5d6147941281e03531beb92062dae7a927f6a17aa6104a8a52b73b46360e6807aac1531fefb99f5701d8a16c05710bd9f75c8bf83f00bec05d405044e2946d2435c284da2d16c1587324338e4c1f284a7c131c71ea39b7ca0d72ee0aa9361e4353a8f29045177c899100007a2737e7efab526e3b01418471a460a2152d75f696b65881920fae7c1c435936cfad5b7c9e712fe2637b2f0928b259b3f701c668c294816e8697435301e2b90dc632c11222f5bd0acd386e52aae0d7dbefe5ce0b3736645ca24207818c3e6b855c0c8617dc3a5e52ddeaa562dd5cfce38ef9c0d34ddffd9050a4da4f1aa471741ae50819622010880a2d08adc6e04b89fa983eb96bc086dcdb69778e1d5ba0b4ee5c4618c159bb99d000fc32156670fd0074fe5ff6a3d36035163715a7bf385bc18b3b9396775cf710804ad22032293a0fcd50dcddae34e3b21f000000000000"], 0x286) r6 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @multicast1}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'\x00', r7}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) 00:08:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000005c0)}, 0x0) recvfrom(r1, &(0x7f0000003540)=""/68, 0x44, 0x0, &(0x7f0000003640)=@ax25={0x3, {"9c3711aa278fef"}}, 0x7071c9) [ 784.761241] audit: type=1400 audit(1544314110.738:274): avc: denied { create } for pid=21257 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:30 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x35, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/99, 0x6}) ptrace$getregs(0xe, r0, 0x4ebd, &(0x7f0000000300)=""/217) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x6) [ 785.518989] audit: type=1400 audit(1544314111.498:275): avc: denied { create } for pid=21276 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000c00)) geteuid() getegid() syz_open_dev$rtc(&(0x7f0000004e00)='/dev/rtc#\x00', 0x1, 0x2400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005100), 0x37, 0x4004000) recvmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x1, 0x20000000000000, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x145e2fcd, 0x100000000}, 0xb) setgroups(0x20, &(0x7f00000006c0)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x286) r6 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @multicast1}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'\x00', r7}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) 00:08:33 executing program 0: r0 = memfd_create(&(0x7f0000000240)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0xfffffffffffffffc}, 0x0, &(0x7f00000000c0)="c483494ba49a0000000000"}, &(0x7f0000000040)={&(0x7f0000000000), {}, 0x0, &(0x7f0000000080)="c4816decef"}, 0x8, &(0x7f00005eaff8)) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_names\x00') 00:08:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$addseals(r0, 0x409, 0xe7e0bf8536c26c95) 00:08:33 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x35, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/99, 0x6}) ptrace$getregs(0xe, r0, 0x4ebd, &(0x7f0000000300)=""/217) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x6) 00:08:33 executing program 4: clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) futex(&(0x7f00000001c0)=0x20000000001, 0x80, 0x1, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000015) 00:08:33 executing program 2: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x800000000000005, 0x0) fchdir(r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f00000004c0)=0xfffffc8f) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) lsetxattr$security_capability(0x0, &(0x7f0000001880)='security.capability\x00', &(0x7f00000018c0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x1) r2 = dup2(r1, 0xffffffffffffff9c) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000016c0)=""/61) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x143) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2, 0x10000}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x30000, 0x6fcd, 0x7, 0x7}, {0xd34, 0x5, 0x2, 0x40}, {0x5, 0x5, 0x0, 0x8}, {0xffffffffffffbc13, 0xff, 0x1a388116, 0x6}]}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000580)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) 00:08:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000006ff4)={@empty, @loopback}, 0xc) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000300)=0x9, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) 00:08:33 executing program 0: r0 = memfd_create(&(0x7f0000000240)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0xfffffffffffffffc}, 0x0, &(0x7f00000000c0)="c483494ba49a0000000000"}, &(0x7f0000000040)={&(0x7f0000000000), {}, 0x0, &(0x7f0000000080)="c4816decef"}, 0x8, &(0x7f00005eaff8)) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_names\x00') 00:08:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000080)="00000600000000000000", 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2}, [{}, {0x3}]}, 0x78) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x80000001) 00:08:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000c00)) geteuid() getegid() syz_open_dev$rtc(&(0x7f0000004e00)='/dev/rtc#\x00', 0x1, 0x2400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005100), 0x37, 0x4004000) recvmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x1, 0x20000000000000, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x145e2fcd, 0x100000000}, 0xb) setgroups(0x20, &(0x7f00000006c0)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x286) r6 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a300000000000000000010000000008000000f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7cb5b560a00000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da000100000000000200000006000000ff0f0000757709a5b8f4282abd9bd67e57352cf244e89668c087469b98fae672b70475e4d33292d7da67091db8a516ab1e76212c509f6c9c8948937dbfabfc60d2892debe623e438e35ed4f8c8a66c8f54555762138e8addf0bfa373254abebe27dff048297e0ee2713fe0d245f8940000342fe81dce0035a90e6da83fd69588be6370f07b85e91739f80124033fbd5ee23a3474f8eb882318a9b1f0e421a9141f8ea16da2190557b61d69092604eeb0082ababf226b4a21c40be27fe8de72a177b2f2f7a730"], 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @multicast1}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'\x00', r7}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) [ 788.044047] audit: type=1400 audit(1544314114.018:276): avc: denied { create } for pid=21299 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2}, 0x80, 0x0}}], 0x2, 0x0) [ 788.438989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket [ 788.775087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket 00:08:34 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) clone(0x402102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x74, 0x0, 0x0, 0xdae6}]}) geteuid() socketpair$unix(0x1, 0x5, 0x0, 0x0) getuid() fcntl$getown(r0, 0x9) [ 789.080996] audit: type=1400 audit(1544314115.058:277): avc: denied { create } for pid=21329 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 789.597305] audit: type=1400 audit(1544314115.578:278): avc: denied { create } for pid=21346 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 790.378308] audit: type=1400 audit(1544314116.358:279): avc: denied { create } for pid=21346 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000c00)) geteuid() getegid() syz_open_dev$rtc(&(0x7f0000004e00)='/dev/rtc#\x00', 0x1, 0x2400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005100), 0x37, 0x4004000) recvmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x1, 0x20000000000000, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x145e2fcd, 0x100000000}, 0xb) setgroups(0x20, &(0x7f00000006c0)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="160000006f000001000000000000000000000000000023194a6976dfc8cf54a73ffddc1555d37895132aed7db527ce8862cf54586985128ee3b9e480ea4c70a3348d9581750002c26bf146a56abc461ad0049fe9593011a964048f5b3f2f8f08000000000000004ef566c57435e16b240e47d608bf76a9e0c20434da271f7cd3787ff065a1606bffff54d768cc2f305fcb89611f87af19eadb9af43898699776c932e77590fc2b9e255ab5c62c022fe6435869134fbaf9a1585b2893e336a7d9ccefd605913fc67e290951ef8aa44ae100b22d95db61e03ecd378c948b590e13783c2372ca36d9feec25fa5b276bfb165213b0899e1596fc6a6dabf74daba86ce81fea3f6dce44240cd091aad6472f61066b459417b32e674a8388a35ecc534c600b6206c04291c71e147eb4c50ce99776c902c2b462b9aebe244f5d6147941281e03531beb92062dae7a927f6a17aa6104a8a52b73b46360e6807aac1531fefb99f5701d8a16c05710bd9f75c8bf83f00bec05d405044e2946d2435c284da2d16c1587324338e4c1f284a7c131c71ea39b7ca0d72ee0aa9361e4353a8f29045177c899100007a2737e7efab526e3b01418471a460a2152d75f696b65881920fae7c1c435936cfad5b7c9e712fe2637b2f0928b259b3f701c668c294816e8697435301e2b90dc632c11222f5bd0acd386e52aae0d7dbefe5ce0b3736645ca24207818c3e6b855c0c8617dc3a5e52ddeaa562dd5cfce38ef9c0d34ddffd9050a4da4f1aa471741ae50819622010880a2d08adc6e04b89fa983eb96bc086dcdb69778e1d5ba0b4ee5c4618c159bb99d000fc32156670fd0074fe5ff6a3d36035163715a7bf385bc18b3b9396775cf710804ad22032293a0fcd50dcddae34e3b21f000000000000"], 0x286) r6 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @multicast1}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'\x00', r7}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) 00:08:37 executing program 3: exit(0x0) r0 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c00075e1dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000", 0x24}], 0x1}, 0x0) 00:08:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000740)=@llc, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000080)=""/9, 0xffffffffffffff51}}], 0x1, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000)=0x12, 0x246f) linkat(r4, &(0x7f0000000300)='./file0\x00', r3, &(0x7f00000005c0)='./file0\x00', 0x1000) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@loopback, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffdfe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="b664af91eef52862e3f2b5b174428509000052439ce68a4269c819ae47388b3e8a537ba2916bce36c0864fe5250a7134e3761b4598b42423c5aa81e0cc9453598eff4e657b8718ce198bf46db384604438584c9bfe4a59eeac67d937e9010001005689662fb153c36cbbbc07ccb120c228a3385ceb9865119024388c80da76cfa356dab20dbce81000ed3ad3faa73adcd4c8af0d4e4d32a484b346f48ce3299fdcc4db12d70dd0a0d488feca5d908cb841a22614e992b0ce8e9c5e4dd6c020fdd2c9472f990098d1f81d6b341f1a92b3ac5ef04c9fd6328d765144e55a5d51711d092842bdfb6502ebf24044299e19ddefd9f11355211f1438ee0515bb51cf8bf2b33cff7ff7ad7e7bf7939fc267bc834adafe147fc4d4d2892fb4e5fc0c83612ff192868bc5faf344039d7d1ec1557e4631ecd446484a5d30ce3773e1fc83ed4247c0546dc86b87eadfbf3474f6b3d2b34db812b5bf97120c1a48ea2117d62a5b5eb7f83e429f8c12f7eee19ec240fc31d70acabfff39083e11b843376c21818b089508ccd418342be3ea5f8a83b7dfdd987ad54ebf19ac7fce39ff3950efaa1d2d6afcbda14e5754d85fbd6806f1ba1c35421ce5ad8b613032ebccf578194b38d1b74ff238de522935fb74b10ab9f1a21fe41a65f76874d1308d334f130f4ef545bf6df854ab3a60ffde9efc8754a00f041d3f7d8a8a2158be69d52a6b71cfc1e59462dfc1ba0ddcefb8590b1ff29025608670dbc3bf27fb31baed310e09a8625ac943"], 0x224) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000001c0)=r7) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 00:08:37 executing program 2: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x800000000000005, 0x0) fchdir(r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f00000004c0)=0xfffffc8f) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) lsetxattr$security_capability(0x0, &(0x7f0000001880)='security.capability\x00', &(0x7f00000018c0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x1) r2 = dup2(r1, 0xffffffffffffff9c) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000016c0)=""/61) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x143) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2, 0x10000}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x30000, 0x6fcd, 0x7, 0x7}, {0xd34, 0x5, 0x2, 0x40}, {0x5, 0x5, 0x0, 0x8}, {0xffffffffffffbc13, 0xff, 0x1a388116, 0x6}]}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000580)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) [ 791.567530] audit: type=1400 audit(1544314117.548:280): avc: denied { create } for pid=21361 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 791.765988] audit: type=1400 audit(1544314117.748:281): avc: denied { create } for pid=21370 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:38 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x800000000000005, 0x0) fchdir(r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f00000004c0)=0xfffffc8f) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) lsetxattr$security_capability(0x0, &(0x7f0000001880)='security.capability\x00', &(0x7f00000018c0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x1) r2 = dup2(r1, 0xffffffffffffff9c) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000016c0)=""/61) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75782ef116afd369f260bb3ff0f093b16ca61f07331d244b6b2cc1bca82cb6d24341b8131bc6bad857d87247ad92d7867a88bdab9442b0c849af376b50ada62750b6d0909c8541dcb319bbd605ad76b1a58354a671821280f8c9e3454891f836f3a74dc61c4193463ce7793e9063bfa5e3439decf669267c2b3210c13ef47acee9f271ec9d5afbdb70ffdc994933f87ded2775e735dcaf876a031a30bfaaa6dc564cdd078cae9a4b97e32ff1470884e3013ec8377d5bd3ef14a0ec2eb46e6503edf88b933ddf93fa84379ae30d56f6c9ecdd320e02b02bcdb8cd2e4fa6f081bb693dd4271fda2b2da568c27887b4d4859bc9185f21eac23519b0cdb2d1ca51f9e7b8187d27945278e4e46222b54bca1c2dfd0617ac9310e8d741adc1c2f73b6835d3560c34a18f256b41eeb74176d8983f7a632df5"], 0x143) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2, 0x10000}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x30000, 0x6fcd, 0x7, 0x7}, {0xd34, 0x5, 0x2, 0x40}, {0x5, 0x5, 0x0, 0x8}, {0xffffffffffffbc13, 0xff, 0x1a388116, 0x6}]}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000580)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) [ 792.124010] audit: type=1400 audit(1544314118.098:282): avc: denied { create } for pid=21361 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000c00)) geteuid() getegid() syz_open_dev$rtc(&(0x7f0000004e00)='/dev/rtc#\x00', 0x1, 0x2400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005100), 0x37, 0x4004000) recvmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x1, 0x20000000000000, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x12, 0x246f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x145e2fcd, 0x100000000}, 0xb) setgroups(0x20, &(0x7f00000006c0)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x286) r6 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @multicast1}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'\x00', r7}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) [ 793.266695] audit: type=1400 audit(1544314119.238:283): avc: denied { create } for pid=21393 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000740)=@llc, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000080)=""/9, 0xffffffffffffff51}}], 0x1, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000)=0x12, 0x246f) linkat(r4, &(0x7f0000000300)='./file0\x00', r3, &(0x7f00000005c0)='./file0\x00', 0x1000) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@loopback, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffdfe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x224) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000001c0)=r7) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) [ 794.480984] audit: type=1400 audit(1544314120.458:284): avc: denied { create } for pid=21399 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:40 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x800000000000005, 0x0) fchdir(r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f00000004c0)=0xfffffc8f) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) lsetxattr$security_capability(0x0, &(0x7f0000001880)='security.capability\x00', &(0x7f00000018c0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x1) r2 = dup2(r1, 0xffffffffffffff9c) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000016c0)=""/61) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75782ef116afd369f260bb3ff0f093b16ca61f07331d244b6b2cc1bca82cb6d24341b8131bc6bad857d87247ad92d7867a88bdab9442b0c849af376b50ada62750b6d0909c8541dcb319bbd605ad76b1a58354a671821280f8c9e3454891f836f3a74dc61c4193463ce7793e9063bfa5e3439decf669267c2b3210c13ef47acee9f271ec9d5afbdb70ffdc994933f87ded2775e735dcaf876a031a30bfaaa6dc564cdd078cae9a4b97e32ff1470884e3013ec8377d5bd3ef14a0ec2eb46e6503edf88b933ddf93fa84379ae30d56f6c9ecdd320e02b02bcdb8cd2e4fa6f081bb693dd4271fda2b2da568c27887b4d4859bc9185f21eac23519b0cdb2d1ca51f9e7b8187d27945278e4e46222b54bca1c2dfd0617ac9310e8d741adc1c2f73b6835d3560c34a18f256b41eeb74176d8983f7a632df5"], 0x143) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2, 0x10000}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x30000, 0x6fcd, 0x7, 0x7}, {0xd34, 0x5, 0x2, 0x40}, {0x5, 0x5, 0x0, 0x8}, {0xffffffffffffbc13, 0xff, 0x1a388116, 0x6}]}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000580)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) 00:08:41 executing program 2: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x800000000000005, 0x0) fchdir(r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f00000004c0)=0xfffffc8f) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) lsetxattr$security_capability(0x0, &(0x7f0000001880)='security.capability\x00', &(0x7f00000018c0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x1) r2 = dup2(r1, 0xffffffffffffff9c) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000016c0)=""/61) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x143) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2, 0x10000}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x30000, 0x6fcd, 0x7, 0x7}, {0xd34, 0x5, 0x2, 0x40}, {0x5, 0x5, 0x0, 0x8}, {0xffffffffffffbc13, 0xff, 0x1a388116, 0x6}]}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000580)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) 00:08:41 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 00:08:42 executing program 1: unshare(0x400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 00:08:43 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) clone(0x402102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x74, 0x0, 0x0, 0xdae6}]}) geteuid() socketpair$unix(0x1, 0x5, 0x0, 0x0) getuid() fcntl$getown(r0, 0x9) 00:08:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000740)=@llc, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000080)=""/9, 0xffffffffffffff51}}], 0x1, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000)=0x12, 0x246f) linkat(r4, &(0x7f0000000300)='./file0\x00', r3, &(0x7f00000005c0)='./file0\x00', 0x1000) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@loopback, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffdfe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x224) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000001c0)=r7) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 00:08:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000080)=0x5dd7d56a, 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80", 0x27, 0xfffffffffffffffa) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7ffffffff000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$TCFLSH(r2, 0x540b, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef12b8f3fee7bbdd7b0734bfbc0aa67355e490efeda765eebd39bb75"], 0x6c) sendfile(r1, r6, 0x0, 0xa5cc554) 00:08:43 executing program 5: rt_sigtimedwait(&(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, 0x8) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000240)={0xfffffffffffffffe}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x5, &(0x7f0000000180)={{0x0, 0x1}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) rt_sigreturn() 00:08:43 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x800000000000005, 0x0) fchdir(r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f00000004c0)=0xfffffc8f) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) lsetxattr$security_capability(0x0, &(0x7f0000001880)='security.capability\x00', &(0x7f00000018c0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x1) r2 = dup2(r1, 0xffffffffffffff9c) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000016c0)=""/61) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x143) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2, 0x10000}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x30000, 0x6fcd, 0x7, 0x7}, {0xd34, 0x5, 0x2, 0x40}, {0x5, 0x5, 0x0, 0x8}, {0xffffffffffffbc13, 0xff, 0x1a388116, 0x6}]}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000580)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) [ 797.872907] audit: type=1400 audit(1544314123.848:285): avc: denied { create } for pid=21440 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 797.895418] audit: type=1400 audit(1544314123.848:286): avc: denied { create } for pid=21430 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 798.428134] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) 00:08:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unlink(&(0x7f0000000340)='./file1/file0\x00') rmdir(&(0x7f0000000280)='./file1/file0\x00') 00:08:44 executing program 1: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x2b, 0x0, &(0x7f0000000600)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000640)) 00:08:45 executing program 1: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x2b, 0x0, &(0x7f0000000600)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000640)) 00:08:45 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "120000000100000000340098641888bc"}, 0x20) [ 800.003670] SELinux: security policydb version 18 (MLS) not backwards compatible [ 800.111263] SELinux: security policydb version 18 (MLS) not backwards compatible 00:08:46 executing program 2: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x800000000000005, 0x0) fchdir(r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f00000004c0)=0xfffffc8f) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) lsetxattr$security_capability(0x0, &(0x7f0000001880)='security.capability\x00', &(0x7f00000018c0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x1) r2 = dup2(r1, 0xffffffffffffff9c) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000016c0)=""/61) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x143) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2, 0x10000}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x30000, 0x6fcd, 0x7, 0x7}, {0xd34, 0x5, 0x2, 0x40}, {0x5, 0x5, 0x0, 0x8}, {0xffffffffffffbc13, 0xff, 0x1a388116, 0x6}]}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000580)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) 00:08:46 executing program 1: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x2b, 0x0, &(0x7f0000000600)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000640)) 00:08:46 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "120000000100000000340098641888bc"}, 0x20) [ 800.841054] SELinux: security policydb version 18 (MLS) not backwards compatible 00:08:47 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) clone(0x402102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x74, 0x0, 0x0, 0xdae6}]}) geteuid() socketpair$unix(0x1, 0x5, 0x0, 0x0) getuid() fcntl$getown(r0, 0x9) 00:08:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000740)=@llc, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000080)=""/9, 0xffffffffffffff51}}], 0x1, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000)=0x12, 0x246f) linkat(r4, &(0x7f0000000300)='./file0\x00', r3, &(0x7f00000005c0)='./file0\x00', 0x1000) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@loopback, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffdfe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x224) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000001c0)=r7) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 00:08:47 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "120000000100000000340098641888bc"}, 0x20) 00:08:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 00:08:47 executing program 1: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x2b, 0x0, &(0x7f0000000600)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000640)) 00:08:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x80045438, &(0x7f0000000040)) [ 801.827080] SELinux: security policydb version 18 (MLS) not backwards compatible 00:08:47 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "120000000100000000340098641888bc"}, 0x20) 00:08:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1040000000002, 0x0) dup2(r0, r1) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x2a}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) [ 802.131620] audit: type=1400 audit(1544314128.108:287): avc: denied { create } for pid=21508 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 802.274823] audit: type=1400 audit(1544314128.258:288): avc: denied { create } for pid=21522 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:48 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000002c0)) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000280)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x3, 0x1, 0x4, 0x5}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netlink\x00') ppoll(&(0x7f0000000080)=[{r4, 0x1010}, {r4, 0x40}, {r4, 0x1}], 0x3, &(0x7f00000000c0), &(0x7f0000000100)={0xffffffff}, 0x8) r5 = request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='keyring\x00', 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r5, 0x3, r6) [ 802.487650] SELinux: security policydb version 18 (MLS) not backwards compatible 00:08:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000002180)=@alg, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=""/168, 0xa8}}], 0x1, 0x1, &(0x7f0000002f00)={0x77359400}) 00:08:50 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) clone(0x402102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x74, 0x0, 0x0, 0xdae6}]}) geteuid() socketpair$unix(0x1, 0x5, 0x0, 0x0) getuid() fcntl$getown(r0, 0x9) 00:08:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/82, 0x52}], 0x1, &(0x7f0000000a00)=""/3, 0x3}, 0xacbdbebfad933dbd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)="010000000000", 0xfffffe8b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast2, @dev, @mcast1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 00:08:50 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xc, r1, 0x0, &(0x7f00000000c0)=""/38) 00:08:50 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 00:08:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 804.635095] audit: type=1400 audit(1544314130.618:289): avc: denied { create } for pid=21571 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:08:51 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0xfffffffffffffffe, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000580)) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000600)) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast1, @remote}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000000000000000003000000003030000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000550000000000000026cbf90805e5bbd7f3c95c17d1437cf563f4250184573f0929aefcd0f031b38dfe0b03960570754108043fad225453268204c0d65f373aa64e8cec69a37f6ae19627bf926cadb69c0a2943e98d741b0efc68abd5b4f19cae269ecc0da5fe2ef2804333e91d93cc1bd810ce5edf2bd67c71852c29"], 0xf9}}, 0x0) 00:08:51 executing program 3: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)="103bcad0ed32d5670139e744d46ebce097791993614000d4fa91deb1a53982fef843025fbf7287317f2909dba3fce24814e12611501ae46145556eb2cdf387488cd377d1b21ed7730ff76c29f398d4274aef5bc1852f1b1b5098f8a3c8e5d4b0929252798710d80a30e4a2e20063c173a262c19a643fe250056f50aaa2f700865a9a11043330493eb39fdd684d115a6d9f914f2b8b18d0db8db55f436fce068789acabb4114f1357276296205ac8332cec992f60cee29959af0d5605551f99a1c091dc8ef853d262d3", 0xc9}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) 00:08:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000002180)=@alg, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=""/168, 0xa8}}], 0x1, 0x1, &(0x7f0000002f00)={0x77359400}) 00:08:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@sec_ctx={0xc, 0x8, {0x1d}}]}, 0xc4}}, 0x0) 00:08:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') clone(0x7fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) r1 = getpid() ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000040)) sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) write$cgroup_int(r0, &(0x7f0000000000)=0x20000000000000, 0x12) 00:08:52 executing program 1: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) setgid(0x0) 00:08:52 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x86000130) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 00:08:53 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1af) 00:08:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000002180)=@alg, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=""/168, 0xa8}}], 0x1, 0x1, &(0x7f0000002f00)={0x77359400}) 00:08:53 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) write(r0, &(0x7f0000000040)="c2", 0x1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000140)='./file0/bus\x00', 0x0) 00:08:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 00:08:53 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000140)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) fstat(r0, 0x0) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@md5={0x1, "4ccd806c76d323cf6a095b2bc0193bb2"}, 0x11, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000080)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000acdf8e6b23e72e44588f0d97b0a6b403cf27251c5f855d6a00000000000000000000000980000000c4fb6e0443f6cc137fb6ed2fe5a1302a5b478b06c1cd4c73f6263408ad0bf2c6124c3ca63d542469b5d90f17526881290cc8e0bbc667ec362189e83f523481d34c0f19fa543136c2347a5630b17368a6399368f190f30004974745c4f932c7a56f458520cbc5e62067cced90fd3b961a05ca1400ecee9633debf5ff535d8ba2e60db8c047355c011c6a4d0beb252a7e4e11412270a707f6880ebdb5a9e3f59a800000b08293014a015d8d4019aa6a75b7e71a6b46d"]) r4 = getpgrp(0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) syz_open_procfs(r4, &(0x7f0000000180)='net/arp\x00') getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) [ 807.960014] audit: type=1400 audit(1544314133.938:290): avc: denied { set_context_mgr } for pid=21637 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 808.168275] binder: 21637:21642 transaction failed 29189/-22, size 24-8 line 3014 [ 808.176178] binder: 21637:21639 ioctl 40046207 0 returned -13 [ 808.248272] audit: type=1400 audit(1544314134.228:291): avc: denied { set_context_mgr } for pid=21637 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 808.390056] binder: 21637:21642 transaction failed 29189/-22, size 24-8 line 3014 [ 808.398698] binder: 21637:21644 ioctl 40046207 0 returned -13 00:08:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 00:08:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x24, 0x0) getdents64(r1, &(0x7f00000000c0)=""/79, 0xfd54) 00:08:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) listen(r0, 0x400007f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) memfd_create(&(0x7f0000000600)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca9488200", 0x2) r2 = syz_open_dev$mice(&(0x7f0000000740)='/dev/input/mice\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000840), 0x1ff) r3 = memfd_create(&(0x7f0000000180)='htcp\x00', 0x5) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xc04) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r3, &(0x7f0000000140)='system_u:object_r:crontab_exec_t:s0\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0xfd, &(0x7f0000000080)) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r5, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)=ANY=[]) listen(r4, 0x400000000000) renameat(r5, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:08:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000002180)=@alg, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=""/168, 0xa8}}], 0x1, 0x1, &(0x7f0000002f00)={0x77359400}) 00:08:54 executing program 3: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x18d) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x5a92) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) sendfile(r3, r1, &(0x7f0000000240), 0xffffffff) umount2(&(0x7f0000000200)='./file0\x00', 0x4) 00:08:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(r0, r0, &(0x7f00000001c0)=0x74000000, 0x5) 00:08:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}}, 0xe8) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070009020000000000000000200000"], 0x10}}, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 00:08:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r1, 0x0, 0x0) 00:08:55 executing program 3: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x18d) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x5a92) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) sendfile(r3, r1, &(0x7f0000000240), 0xffffffff) umount2(&(0x7f0000000200)='./file0\x00', 0x4) 00:08:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) listen(r0, 0x400007f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) memfd_create(&(0x7f0000000600)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca9488200", 0x2) r2 = syz_open_dev$mice(&(0x7f0000000740)='/dev/input/mice\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000840), 0x1ff) r3 = memfd_create(&(0x7f0000000180)='htcp\x00', 0x5) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xc04) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r3, &(0x7f0000000140)='system_u:object_r:crontab_exec_t:s0\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0xfd, &(0x7f0000000080)) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r5, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)=ANY=[]) listen(r4, 0x400000000000) renameat(r5, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:08:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) listen(r0, 0x400007f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) memfd_create(&(0x7f0000000600)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca9488200", 0x2) r2 = syz_open_dev$mice(&(0x7f0000000740)='/dev/input/mice\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000840), 0x1ff) r3 = memfd_create(&(0x7f0000000180)='htcp\x00', 0x5) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xc04) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r3, &(0x7f0000000140)='system_u:object_r:crontab_exec_t:s0\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0xfd, &(0x7f0000000080)) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r5, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)=ANY=[]) listen(r4, 0x400000000000) renameat(r5, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:08:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 00:08:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x16}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 00:08:59 executing program 3: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x18d) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x5a92) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) sendfile(r3, r1, &(0x7f0000000240), 0xffffffff) umount2(&(0x7f0000000200)='./file0\x00', 0x4) 00:08:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) unshare(0x0) r3 = socket(0x10, 0x2, 0xc) fgetxattr(r3, &(0x7f0000000080)=@random={'btrfs.', '/dev/zero\x00'}, 0x0, 0x0) 00:08:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) listen(r0, 0x400007f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) memfd_create(&(0x7f0000000600)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca9488200", 0x2) r2 = syz_open_dev$mice(&(0x7f0000000740)='/dev/input/mice\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000840), 0x1ff) r3 = memfd_create(&(0x7f0000000180)='htcp\x00', 0x5) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xc04) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r3, &(0x7f0000000140)='system_u:object_r:crontab_exec_t:s0\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0xfd, &(0x7f0000000080)) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r5, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)=ANY=[]) listen(r4, 0x400000000000) renameat(r5, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:08:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) listen(r0, 0x400007f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) memfd_create(&(0x7f0000000600)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca9488200", 0x2) r2 = syz_open_dev$mice(&(0x7f0000000740)='/dev/input/mice\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000840), 0x1ff) r3 = memfd_create(&(0x7f0000000180)='htcp\x00', 0x5) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xc04) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r3, &(0x7f0000000140)='system_u:object_r:crontab_exec_t:s0\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0xfd, &(0x7f0000000080)) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r5, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)=ANY=[]) listen(r4, 0x400000000000) renameat(r5, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) [ 813.487979] audit: type=1400 audit(1544314139.468:292): avc: denied { create } for pid=21797 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 00:08:59 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = open(0x0, 0x44400, 0x1a1) r2 = dup2(r0, 0xffffffffffffff9c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2, 0x10000}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@random={'osx.', '/selinux/status\x00'}) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000300)) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000005c0)={0x3, 0x0, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) socket$key(0xf, 0x3, 0x2) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) 00:08:59 executing program 5: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x42) stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000001940)) 00:08:59 executing program 4: capset(0x0, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x400000000000e6) setpriority(0x2, 0x0, 0x0) 00:09:00 executing program 3: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x18d) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x5a92) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) sendfile(r3, r1, &(0x7f0000000240), 0xffffffff) umount2(&(0x7f0000000200)='./file0\x00', 0x4) 00:09:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) listen(r0, 0x400007f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) memfd_create(&(0x7f0000000600)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca9488200", 0x2) r2 = syz_open_dev$mice(&(0x7f0000000740)='/dev/input/mice\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000840), 0x1ff) r3 = memfd_create(&(0x7f0000000180)='htcp\x00', 0x5) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xc04) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r3, &(0x7f0000000140)='system_u:object_r:crontab_exec_t:s0\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0xfd, &(0x7f0000000080)) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r5, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)=ANY=[]) listen(r4, 0x400000000000) renameat(r5, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:00 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18}, 0x18) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 00:09:00 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x3d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:09:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) listen(r0, 0x400007f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) memfd_create(&(0x7f0000000600)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca9488200", 0x2) r2 = syz_open_dev$mice(&(0x7f0000000740)='/dev/input/mice\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000840), 0x1ff) r3 = memfd_create(&(0x7f0000000180)='htcp\x00', 0x5) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xc04) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r3, &(0x7f0000000140)='system_u:object_r:crontab_exec_t:s0\x00', 0xb) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0xfd, &(0x7f0000000080)) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r5, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)=ANY=[]) listen(r4, 0x400000000000) renameat(r5, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:01 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x29}], 0x10}, 0x0) 00:09:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x8}], 0x10}}], 0x2, 0x0) 00:09:02 executing program 2: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 00:09:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) pipe2(&(0x7f00000006c0), 0x10080000) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xffffffffffffffa6}, 0x1a6db1e6) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000500)=""/255, &(0x7f0000000380)=0xff) write$P9_RREADDIR(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="5d0000002901000400000008fdffffff080000000000000000000000000000001f05002e2f6275730800000000000000000000000004000000000000006600000403000000040000000000000000010000000000000005002e2f62757348b1dfb4c45a0bb12358edd395111f303f5f95124f84d97096e03a949c736e7ae2e9c898b1de1fc4e972b7ef8c9f7b8188f275704eb8935c63ab17363da662e49d193dd4c3131f455f521df587f9326112e7fb613f71bcff999edd13cca689e13664c29d39a22a7e1f4d7f4924098d27908eb105000000000000005126981c9d64acaeb2b1ce2f99286ee7360869292932f3d2a5b07e3016e439a4354fb226cfaa58e3614ae2cd84f550cb1eb03c17443ce7d9c69519572f35a1ed368a404af1693e129bc166a616edf0312278ff9b1b4863899e71f6e1dac1117eb7b912ce"], 0x13c) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000780)) fsync(r4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b") ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) fcntl$setflags(r0, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000600)={'bcsh0\x00', {0x2, 0x4e24, @loopback}}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$setstatus(r5, 0x4, 0x8d264d94b88cc547) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) 00:09:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) pipe2(&(0x7f00000006c0), 0x10080000) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xffffffffffffffa6}, 0x1a6db1e6) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000500)=""/255, &(0x7f0000000380)=0xff) write$P9_RREADDIR(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x13c) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000780)) fsync(r4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b") ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) fcntl$setflags(r0, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000600)={'bcsh0\x00', {0x2, 0x4e24, @loopback}}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$setstatus(r5, 0x4, 0x8d264d94b88cc547) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) 00:09:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0x0, &(0x7f00000002c0)) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) listen(r3, 0xd5) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$TIOCNOTTY(r3, 0x5422) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000500)=""/255, &(0x7f0000000380)=0xff) write$P9_RREADDIR(r3, &(0x7f0000000400)={0x45, 0x29, 0x1, {0x4, [{{0x8, 0xfffffffffffffffd}, 0x0, 0x1f, 0x5, './bus'}, {{0x4, 0x0, 0x4}, 0x100, 0x0, 0x5, './bus'}]}}, 0x45) fsync(r4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b") ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) fcntl$setflags(r0, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000300)=0x7) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000640)=0xeb) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x2400, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$setstatus(r5, 0x4, 0x8d264d94b88cc547) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x796, 0x4, 0x10001}) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) 00:09:03 executing program 2: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 00:09:03 executing program 1: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 00:09:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) pipe2(&(0x7f00000006c0), 0x10080000) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xffffffffffffffa6}, 0x1a6db1e6) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000500)=""/255, &(0x7f0000000380)=0xff) write$P9_RREADDIR(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x13c) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000780)) fsync(r4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b") ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) fcntl$setflags(r0, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000600)={'bcsh0\x00', {0x2, 0x4e24, @loopback}}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$setstatus(r5, 0x4, 0x8d264d94b88cc547) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) 00:09:03 executing program 1: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 00:09:03 executing program 2: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 00:09:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000340)="c6", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="9d", 0x1, 0x0, 0x0, 0x0) 00:09:05 executing program 2: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 00:09:05 executing program 1: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x400) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) accept4(r1, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 00:09:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) pipe2(&(0x7f00000006c0), 0x10080000) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xffffffffffffffa6}, 0x1a6db1e6) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000500)=""/255, &(0x7f0000000380)=0xff) write$P9_RREADDIR(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x13c) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000780)) fsync(r4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b") ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) fcntl$setflags(r0, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000600)={'bcsh0\x00', {0x2, 0x4e24, @loopback}}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$setstatus(r5, 0x4, 0x8d264d94b88cc547) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) 00:09:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) pipe2(&(0x7f00000006c0), 0x10080000) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xffffffffffffffa6}, 0x1a6db1e6) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000500)=""/255, &(0x7f0000000380)=0xff) write$P9_RREADDIR(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x13c) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000780)) fsync(r4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b") ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) fcntl$setflags(r0, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000600)={'bcsh0\x00', {0x2, 0x4e24, @loopback}}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$setstatus(r5, 0x4, 0x8d264d94b88cc547) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) 00:09:05 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000240)=0x1003, 0x4) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12001, 0x0) 00:09:05 executing program 4: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xaa8}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') writev(r0, &(0x7f00000000c0), 0x20000000000003fa) 00:09:05 executing program 5: r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r3) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x4, 0x0) 00:09:05 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fac013cb0e5f7b6489485b385afcd7834bffe5653ce907afccfb830225d71eda000576f9b0ba19ab398b8d71f3399a310d71fcb12a9f88de3b64664e722b8a24a1e010553741253bffd1bf27ebcefbd6c534c3484e222df0df46b7d6c9f5ccc929e6cbcc36bb9e7341863668bf9312c65abd10fabdd916124fe0960fc7c60d9a51d328666d8844ec560ae9ac7ab9a5f914d5e48bf087e8e8fc9e27d597"], 0xab}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x17c}}, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14, 0x7fffe) getsockopt(r0, 0x9, 0x8, &(0x7f0000000540)=""/59, &(0x7f0000000580)=0x3b) r1 = open(&(0x7f0000000380)='./file0\x00', 0x400100, 0x1) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000c80)=""/228) r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x800, 0xc270) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r8, &(0x7f0000000500)={0x20}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r4, 0x8956, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000840)=0xc) setreuid(r9, r10) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f00000004c0)={'L-'}, 0x28, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r3, &(0x7f0000000180), 0xfffffffffffffd6a) sendmmsg(r2, &(0x7f0000000040), 0x8000000000000d2, 0x40000) munlockall() 00:09:05 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r1, &(0x7f0000000240)=""/171, 0xab) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, &(0x7f00000001c0), r2, 0x0, 0x40, 0x0) 00:09:06 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) io_setup(0x5d, &(0x7f0000000300)=0x0) io_destroy(r1) recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000004000)=@ll, 0x80, &(0x7f0000006180), 0x0, &(0x7f00000061c0)=""/250, 0xfa}}], 0x1, 0x0, &(0x7f0000007e80)={0x77359400}) clone(0x0, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) 00:09:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 00:09:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) pipe2(&(0x7f00000006c0), 0x10080000) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xffffffffffffffa6}, 0x1a6db1e6) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000500)=""/255, &(0x7f0000000380)=0xff) write$P9_RREADDIR(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="5d0000002901000400000008fdffffff080000000000000000000000000000001f05002e2f6275730800000000000000000000000004000000000000006600000403000000040000000000000000010000000000000005002e2f62757348b1dfb4c45a0bb12358edd395111f303f5f95124f84d97096e03a949c736e7ae2e9c898b1de1fc4e972b7ef8c9f7b8188f275704eb8935c63ab17363da662e49d193dd4c3131f455f521df587f9326112e7fb613f71bcff999edd13cca689e13664c29d39a22a7e1f4d7f4924098d27908eb105000000000000005126981c9d64acaeb2b1ce2f99286ee7360869292932f3d2a5b07e3016e439a4354fb226cfaa58e3614ae2cd84f550cb1eb03c17443ce7d9c69519572f35a1ed368a404af1693e129bc166a616edf0312278ff9b1b4863899e71f6e1dac1117eb7b912ce"], 0x13c) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000780)) fsync(r4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b") ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) fcntl$setflags(r0, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000600)={'bcsh0\x00', {0x2, 0x4e24, @loopback}}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$setstatus(r5, 0x4, 0x8d264d94b88cc547) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) 00:09:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x41}, 0x14}}, 0x0) [ 820.918258] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. [ 821.023955] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. 00:09:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) pipe2(&(0x7f00000006c0), 0x10080000) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xffffffffffffffa6}, 0x1a6db1e6) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000500)=""/255, &(0x7f0000000380)=0xff) write$P9_RREADDIR(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x13c) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000780)) fsync(r4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b") ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) fcntl$setflags(r0, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000600)={'bcsh0\x00', {0x2, 0x4e24, @loopback}}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$setstatus(r5, 0x4, 0x8d264d94b88cc547) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) [ 821.110726] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. 00:09:07 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) io_setup(0x5d, &(0x7f0000000300)=0x0) io_destroy(r1) recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000004000)=@ll, 0x80, &(0x7f0000006180), 0x0, &(0x7f00000061c0)=""/250, 0xfa}}], 0x1, 0x0, &(0x7f0000007e80)={0x77359400}) clone(0x0, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) 00:09:07 executing program 5: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000a1aff7)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001f80)={@ipv4={[], [], @local}}, 0x98) [ 821.434714] audit: type=1400 audit(1544314147.418:293): avc: denied { create } for pid=22007 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 821.634166] audit: type=1400 audit(1544314147.618:294): avc: denied { create } for pid=22007 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 00:09:07 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') [ 821.958904] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. 00:09:08 executing program 5: r0 = gettid() exit(0x0) setpriority(0x1, r0, 0x0) [ 822.086382] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. [ 822.174347] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. 00:09:08 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) io_setup(0x5d, &(0x7f0000000300)=0x0) io_destroy(r1) recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000004000)=@ll, 0x80, &(0x7f0000006180), 0x0, &(0x7f00000061c0)=""/250, 0xfa}}], 0x1, 0x0, &(0x7f0000007e80)={0x77359400}) clone(0x0, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) [ 823.177380] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. [ 823.215247] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. [ 823.278471] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. 00:09:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000838f18)={{{@in6, @in=@local={0xac, 0x14, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0xff}, 0x0, @in6=@mcast1}}, 0xf7) 00:09:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x5, 0xd8, [0x0, 0x20000280, 0x200003d8, 0x200004f0], 0x0, &(0x7f0000000080), &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000006970646470300000000000000000000064756d6d79300000000000000000000073797a6b616c6c657230000000000000766c616e3000000000000000000000002751b328ce03000000000000ff"]}, 0x150) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss], 0x2217) 00:09:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0x0, 0x3, 0xa129, 0x1, 0xffffffffffffff01}, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x7}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)="df6c51c7bf5f8a4d8643869e4ccb891cdfcdf8426b0192fdaceef8985d539aa3ca359c284afe17ba", 0x28) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'ip6_vth0\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet6_buf(r0, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000180)="f4574ffcacb70a865c6bb8", 0xb, 0xfffffffffffffff9) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:mail_spool_t:s0\x00', 0x22) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) keyctl$clear(0x7, 0x0) 00:09:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r2, 0x10, 0x80, 0x7fff) 00:09:10 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) io_setup(0x5d, &(0x7f0000000300)=0x0) io_destroy(r1) recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000004000)=@ll, 0x80, &(0x7f0000006180), 0x0, &(0x7f00000061c0)=""/250, 0xfa}}], 0x1, 0x0, &(0x7f0000007e80)={0x77359400}) clone(0x0, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) 00:09:10 executing program 5: keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0xffffffffffffffe4) 00:09:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="6bea0eab4d4d119f119f91abff030000b68720d5c4cb96f2eee0080921a3cbfe7d5a2bb717c76b0744c40f24e63101000000a1bb387eb825b9b6f07703ff000000000000003ecfc20b00000000000087018610f10b8168026fe69cd4e96a"], 0x1) fcntl$setstatus(r1, 0x4, 0x4bff) io_setup(0x1, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) fcntl$setsig(r2, 0xa, 0x2f) setsockopt$inet_opts(r2, 0x0, 0xa, &(0x7f0000000700)="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", 0x10b) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x8) sendto$inet(r2, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendto(r2, &(0x7f0000000040)="b6", 0x1, 0x1, &(0x7f00000004c0)=@generic={0x1, "94296ac904011c26d3a3b8152e9e6f59de6884faa62e48fbf23ee4dc66d36186ef3c3147ae1fcfd2104c336016224319047e5f9c83912ad807eae03b41b33e5ffa0087cd5a0012cbbfe78e73c8517e82dd82da1efb0da308528acd3bef8c822bdac481558d8a859e36703e28d7c8693374226b55b4eea4c31a3411954afb"}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0xda9, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) pipe(&(0x7f0000000080)) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r2, &(0x7f0000005680)=[{{&(0x7f0000000c00)=@xdp, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f0000001f40)=""/12, 0xc}}, {{&(0x7f0000001f80)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000002000)=""/19, 0x13}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/98, 0x62}, {&(0x7f00000040c0)=""/245, 0xf5}, {&(0x7f00000041c0)=""/189, 0xbd}, {&(0x7f0000004280)=""/18, 0x12}, {&(0x7f00000042c0)=""/9, 0x9}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x9, &(0x7f00000053c0)=""/46, 0x2e}, 0x2}, {{&(0x7f0000005400)=@un=@abs, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/214, 0xd6}], 0x1, &(0x7f00000055c0)=""/185, 0xb9, 0x4}, 0x20}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:09:10 executing program 3: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000dfa000)=@routing={0x0, 0x2, 0x2, 0x101, 0x0, [@mcast2]}, 0x18) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0xfffffefffffffffb, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 824.337161] vmalloc: allocation failure: 12488538408 bytes [ 824.342817] syz-executor2: page allocation failure: order:0, mode:0x24000c2 [ 824.422983] CPU: 1 PID: 22066 Comm: syz-executor2 Not tainted 4.4.166+ #1 [ 824.429934] 0000000000000000 ba161fa3a28c369a ffff8801d02f7918 ffffffff81aa62ad [ 824.438009] 1ffff1003a05ef26 ffff8801c25aaf80 00000000024000c2 0000000000000000 [ 824.446162] ffffffff82894540 ffff8801d02f7a28 ffffffff814871d8 0000000000000001 [ 824.454207] Call Trace: [ 824.456826] [] dump_stack+0xc1/0x124 [ 824.462251] [] warn_alloc_failed.cold.34+0x33/0x9b [ 824.463060] netlink: 44 bytes leftover after parsing attributes in process `syz-executor4'. [ 824.477318] [] ? zone_watermark_ok_safe+0x280/0x280 [ 824.483991] [] ? kasan_kmalloc.part.1+0xc9/0xf0 [ 824.490305] [] ? save_stack_trace+0x26/0x50 [ 824.496286] [] ? check_preemption_disabled+0x3b/0x200 [ 824.503159] [] __vmalloc_node_range+0x360/0x630 [ 824.509472] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 824.516313] [] vmalloc+0x5b/0x70 [ 824.521367] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 824.527874] [] xt_alloc_entry_offsets+0x41/0x60 [ 824.534192] [] translate_table+0x215/0x1750 [ 824.540162] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 824.546912] [] ? compat_do_ip6t_get_ctl+0x910/0x910 [ 824.553572] [] ? __check_object_size+0x217/0x327 [ 824.560005] [] do_ip6t_set_ctl+0x2b3/0x450 [ 824.565889] [] ? compat_do_ip6t_set_ctl+0x140/0x140 00:09:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getrusage(0xffffffffffffffff, &(0x7f0000001e80)) [ 824.572547] [] ? mutex_unlock+0x9/0x10 [ 824.578085] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 824.585210] [] nf_setsockopt+0x6d/0xc0 [ 824.590746] [] ipv6_setsockopt+0xc8/0x130 [ 824.596538] [] tcp_setsockopt+0x88/0xe0 [ 824.602162] [] sock_common_setsockopt+0x9a/0xe0 [ 824.608482] [] SyS_setsockopt+0x166/0x260 [ 824.614272] [] ? SyS_recv+0x40/0x40 00:09:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp\x00') clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) [ 824.619556] [] ? SyS_clock_gettime+0x11e/0x1e0 [ 824.625777] [] ? SyS_clock_settime+0x210/0x210 [ 824.632004] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 824.638490] [] entry_SYSCALL_64_fastpath+0x1e/0x9a 00:09:10 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r0, 0x0) shutdown(r0, 0x1) 00:09:10 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x11, 0x0, 0x8003) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x3b7f8342) 00:09:11 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = eventfd(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') sendfile(r1, r2, &(0x7f00000000c0), 0xffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r1, r2, &(0x7f0000000080), 0x1000000008) tkill(r0, 0x15) 00:09:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000240)="0581c7000500000000000000ffa2ad88050000000000008c39160aaacb57a80000067d1a80e19e33e3c2e7725f4a5861153709000000f7402810247f0139d643ba0708e265756fe5eb8f5972eaecfffc2bd9e9aba5568a12843d4342277bd6adf74af03e90f5490f2a38ff07e4b0a084b53a683747f955a47ddc7100080000395da1a7ba8a7069cdb5f4eff4aae8b98ccd4245ad64ceaa7ad4974418b715a624f2cfdaf236512e17960229a1b3bc79b3603a800292fa7c36fb4f6c1342c60e17e6539f6bfeef0bae71fd57b9798d8b6370", 0xd1, 0x0, &(0x7f0000000000)={0xa, 0x100200000800, 0x8000000000006, @remote}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000580)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)=""/246, 0xf6}], 0x1, &(0x7f00000007c0)=""/52, 0x34}}, {{0x0, 0x0, &(0x7f0000002a80)}}], 0x2, 0x0, &(0x7f0000005880)={0x0, 0x1c9c380}) [ 825.948965] Mem-Info: [ 825.952188] active_anon:129717 inactive_anon:30089 isolated_anon:0 [ 825.952188] active_file:7282 inactive_file:23970 isolated_file:0 [ 825.952188] unevictable:0 dirty:112 writeback:0 unstable:0 [ 825.952188] slab_reclaimable:5905 slab_unreclaimable:63419 [ 825.952188] mapped:60022 shmem:42652 pagetables:7243 bounce:0 [ 825.952188] free:1316170 free_pcp:613 free_cma:0 [ 826.070598] DMA32 free:2400812kB min:4696kB low:5868kB high:7044kB active_anon:238320kB inactive_anon:57932kB active_file:13748kB inactive_file:44340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021784kB mlocked:0kB dirty:224kB writeback:0kB mapped:110748kB shmem:80556kB slab_reclaimable:10944kB slab_unreclaimable:115404kB kernel_stack:6912kB pagetables:13332kB unstable:0kB bounce:0kB free_pcp:1188kB local_pcp:556kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 826.195088] lowmem_reserve[]: 0 3504 3504 [ 826.211966] Normal free:2863876kB min:5580kB low:6972kB high:8368kB active_anon:280548kB inactive_anon:62424kB active_file:15380kB inactive_file:51540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:224kB writeback:0kB mapped:129340kB shmem:90052kB slab_reclaimable:12676kB slab_unreclaimable:138272kB kernel_stack:8768kB pagetables:15640kB unstable:0kB bounce:0kB free_pcp:1272kB local_pcp:644kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 826.275411] lowmem_reserve[]: 0 0 0 [ 826.292280] DMA32: 896*4kB (UME) 729*8kB (UME) 410*16kB (ME) 714*32kB (UME) 271*64kB (UME) 179*128kB (UME) 178*256kB (UM) 120*512kB (UME) 89*1024kB (UM) 35*2048kB (UME) 501*4096kB (UM) = 2401000kB 00:09:12 executing program 2: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffa) io_setup(0x9, &(0x7f0000000000)=0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_getevents(r0, 0x8, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x77359400}) 00:09:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000080)=""/8, &(0x7f0000706ffc)=0x8) 00:09:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="6bea0eab4d4d119f119f91abff030000b68720d5c4cb96f2eee0080921a3cbfe7d5a2bb717c76b0744c40f24e63101000000a1bb387eb825b9b6f07703ff000000000000003ecfc20b00000000000087018610f10b8168026fe69cd4e96a"], 0x1) fcntl$setstatus(r1, 0x4, 0x4bff) io_setup(0x1, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) fcntl$setsig(r2, 0xa, 0x2f) setsockopt$inet_opts(r2, 0x0, 0xa, &(0x7f0000000700)="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", 0x10b) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x8) sendto$inet(r2, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendto(r2, &(0x7f0000000040)="b6", 0x1, 0x1, &(0x7f00000004c0)=@generic={0x1, "94296ac904011c26d3a3b8152e9e6f59de6884faa62e48fbf23ee4dc66d36186ef3c3147ae1fcfd2104c336016224319047e5f9c83912ad807eae03b41b33e5ffa0087cd5a0012cbbfe78e73c8517e82dd82da1efb0da308528acd3bef8c822bdac481558d8a859e36703e28d7c8693374226b55b4eea4c31a3411954afb"}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0xda9, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) pipe(&(0x7f0000000080)) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r2, &(0x7f0000005680)=[{{&(0x7f0000000c00)=@xdp, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f0000001f40)=""/12, 0xc}}, {{&(0x7f0000001f80)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000002000)=""/19, 0x13}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/98, 0x62}, {&(0x7f00000040c0)=""/245, 0xf5}, {&(0x7f00000041c0)=""/189, 0xbd}, {&(0x7f0000004280)=""/18, 0x12}, {&(0x7f00000042c0)=""/9, 0x9}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x9, &(0x7f00000053c0)=""/46, 0x2e}, 0x2}, {{&(0x7f0000005400)=@un=@abs, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/214, 0xd6}], 0x1, &(0x7f00000055c0)=""/185, 0xb9, 0x4}, 0x20}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:09:12 executing program 3: clone(0xfffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r1) tkill(r1, 0x1c) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001380)={0x74, 0x7d, 0x0, {{0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2, ':]', 0x1, '\'', 0x12, '+-vmnet1.]}keyring', 0x7, 'cgroup#'}, 0x10, 'keyringtrusted3%'}}, 0x74) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 00:09:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) [ 826.327216] Normal: 1053*4kB (UME) 688*8kB (UME) 387*16kB (ME) 621*32kB (UME) 195*64kB (UME) 111*128kB (UME) 104*256kB (UME) 73*512kB (UM) 59*1024kB (UM) 25*2048kB (UM) 641*4096kB (UM) = 2863620kB [ 826.358412] 73904 total pagecache pages [ 826.367043] 0 pages in swap cache [ 826.371282] Swap cache stats: add 0, delete 0, find 0/0 [ 826.376787] Free swap = 0kB [ 826.379812] Total swap = 0kB [ 826.382820] 1965979 pages RAM [ 826.386007] 0 pages HighMem/MovableOnly [ 826.389967] 313342 pages reserved 00:09:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 00:09:12 executing program 4: timer_create(0xa, &(0x7f0000044000), &(0x7f0000000000)) 00:09:12 executing program 0: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x200031, 0xffffffffffffffff, 0x0) fstatfs(r1, &(0x7f00000000c0)=""/114) 00:09:12 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getcwd(&(0x7f0000000400)=""/4096, 0x1000) 00:09:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a000400020007f7ff008aa159abe0bf004b5800000000", 0x39}], 0x1) 00:09:13 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="6bea0eab4d4d119f119f91abff030000b68720d5c4cb96f2eee0080921a3cbfe7d5a2bb717c76b0744c40f24e63101000000a1bb387eb825b9b6f07703ff000000000000003ecfc20b00000000000087018610f10b8168026fe69cd4e96a"], 0x1) fcntl$setstatus(r1, 0x4, 0x4bff) io_setup(0x1, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) fcntl$setsig(r2, 0xa, 0x2f) setsockopt$inet_opts(r2, 0x0, 0xa, &(0x7f0000000700)="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", 0x10b) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x8) sendto$inet(r2, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendto(r2, &(0x7f0000000040)="b6", 0x1, 0x1, &(0x7f00000004c0)=@generic={0x1, "94296ac904011c26d3a3b8152e9e6f59de6884faa62e48fbf23ee4dc66d36186ef3c3147ae1fcfd2104c336016224319047e5f9c83912ad807eae03b41b33e5ffa0087cd5a0012cbbfe78e73c8517e82dd82da1efb0da308528acd3bef8c822bdac481558d8a859e36703e28d7c8693374226b55b4eea4c31a3411954afb"}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0xda9, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) pipe(&(0x7f0000000080)) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r2, &(0x7f0000005680)=[{{&(0x7f0000000c00)=@xdp, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f0000001f40)=""/12, 0xc}}, {{&(0x7f0000001f80)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000002000)=""/19, 0x13}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/98, 0x62}, {&(0x7f00000040c0)=""/245, 0xf5}, {&(0x7f00000041c0)=""/189, 0xbd}, {&(0x7f0000004280)=""/18, 0x12}, {&(0x7f00000042c0)=""/9, 0x9}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x9, &(0x7f00000053c0)=""/46, 0x2e}, 0x2}, {{&(0x7f0000005400)=@un=@abs, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/214, 0xd6}], 0x1, &(0x7f00000055c0)=""/185, 0xb9, 0x4}, 0x20}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:09:13 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000000300)='./bus\x00') lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) write$P9_ROPEN(r1, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa5cc554) 00:09:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x28002) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200), 0x8) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 00:09:13 executing program 2: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) 00:09:13 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x30, 0x18, 0xa21, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) 00:09:14 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 00:09:14 executing program 4: waitid(0x1, 0x0, &(0x7f0000000040), 0x5, &(0x7f0000000140)) 00:09:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r1, 0x800000001, 0x1, &(0x7f0000001180)=""/166, &(0x7f0000000100)=0xa6) 00:09:15 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="6bea0eab4d4d119f119f91abff030000b68720d5c4cb96f2eee0080921a3cbfe7d5a2bb717c76b0744c40f24e63101000000a1bb387eb825b9b6f07703ff000000000000003ecfc20b00000000000087018610f10b8168026fe69cd4e96a"], 0x1) fcntl$setstatus(r1, 0x4, 0x4bff) io_setup(0x1, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) fcntl$setsig(r2, 0xa, 0x2f) setsockopt$inet_opts(r2, 0x0, 0xa, &(0x7f0000000700)="6b0107ac30a255437fabb5af8f4e35e63a2d180cc05757f10dc8b8bd7795c83505d20600000000000000c95b335858c77e6ebfa8f80c3e25a96b9041593f13b4143d25ca5f1e919a283fd1a7651d46f03038ae04e7e168bf0ae4a9546121d452fcbc159191bf32730ea8ce2e68bc7f000000000000000000007692a337d443454fb0dcfb23245cbb21d103934018f34f3acebbe707c178a8f2a2d9023a1478d5af394d986c94650434f5613a04c71f872c600e39bccd0b8e2216816016471aad0a03c29dec2d1d699448857aaf353d42bca82d78ae9152756320eea56fcc97886758afd2105132dd4395b075284f85cea27953c19de20b03e6530d3b1a3384d753f406b0c0182bdb0fbf9e", 0x10b) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x8) sendto$inet(r2, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendto(r2, &(0x7f0000000040)="b6", 0x1, 0x1, &(0x7f00000004c0)=@generic={0x1, "94296ac904011c26d3a3b8152e9e6f59de6884faa62e48fbf23ee4dc66d36186ef3c3147ae1fcfd2104c336016224319047e5f9c83912ad807eae03b41b33e5ffa0087cd5a0012cbbfe78e73c8517e82dd82da1efb0da308528acd3bef8c822bdac481558d8a859e36703e28d7c8693374226b55b4eea4c31a3411954afb"}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0xda9, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) pipe(&(0x7f0000000080)) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r2, &(0x7f0000005680)=[{{&(0x7f0000000c00)=@xdp, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f0000001f40)=""/12, 0xc}}, {{&(0x7f0000001f80)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000002000)=""/19, 0x13}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/98, 0x62}, {&(0x7f00000040c0)=""/245, 0xf5}, {&(0x7f00000041c0)=""/189, 0xbd}, {&(0x7f0000004280)=""/18, 0x12}, {&(0x7f00000042c0)=""/9, 0x9}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x9, &(0x7f00000053c0)=""/46, 0x2e}, 0x2}, {{&(0x7f0000005400)=@un=@abs, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)=""/214, 0xd6}], 0x1, &(0x7f00000055c0)=""/185, 0xb9, 0x4}, 0x20}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:09:15 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000000300)='./bus\x00') lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) write$P9_ROPEN(r1, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa5cc554) 00:09:15 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ptrace(0x18, r0) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000600)="80", 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:09:15 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 00:09:15 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 00:09:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write$selinux_access(r1, &(0x7f0000000140)={'system_u:object_r:audisp_exec_t:s0', 0x20, 'unconfined', 0x20, 0xfffffffffffffffe}, 0x43) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) 00:09:16 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast1, 0x9}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) 00:09:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/unix\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="73636865640048e9709c75471506ba03357386fd92dc6d735d835f33f713abb62664c31698e60df7909d24a7cb0c5d85724d1d87ea96ad2d73e83449f302002a5d0b1957b526d9a66403b879acdce941d561a43725be3a965a02e04da8611c8bdca510eed773b6d58ba90141396a825b237f9a3bebfb14617b436854cd0809015a2124f79fb13308415a8ffa37664a83672ec3ead71eb51ce6d2f8b6fa86884cc64cbe361c3002780e04e48bb8de") sendfile(r1, r0, 0x0, 0x4002d) 00:09:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r5 = getgid() chown(&(0x7f0000000080)='./bus\x00', r4, r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x5654807, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) rmdir(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) sendfile(r0, r6, 0x0, 0x2) ioctl$EXT4_IOC_RESIZE_FS(r6, 0x40086610, &(0x7f0000000140)=0xff) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U+'}, 0x28, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) write$selinux_load(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8cff7cf9080000005345204c564b757816000002ab0000824f00400000000000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c143aef6e53b3bdff2777626786000000000000e85751c5e4e38a4572d7c600000080e7232bd98c942555b72a16d48815b0c763d0281ac13df93bea9e81bdc4e600"], 0x7a) sendfile(r1, r7, 0x0, 0xa5cc554) 00:09:16 executing program 2: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x5bd4aae3) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setpriority(0x0, 0x0, 0x0) 00:09:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r1 = getpid() rt_sigqueueinfo(r1, 0x30, &(0x7f0000000040)) setpgid(r1, 0x0) 00:09:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r1 = gettid() getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000480)={'icmp\x00'}, &(0x7f0000000580)=0x1e) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) wait4(0x0, 0x0, 0x0, 0x0) 00:09:17 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000000300)='./bus\x00') lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) write$P9_ROPEN(r1, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa5cc554) 00:09:17 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000000000), 0x0) 00:09:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback, 0xf0ffffff, 0x6c}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 00:09:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 00:09:19 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x90004524, &(0x7f0000000080)) 00:09:19 executing program 5: r0 = socket(0x280000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000080)="240000001a0025f00485bc04fef7001c020b49ffed000000800008000800100001000000", 0x24) 00:09:19 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000000300)='./bus\x00') lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) write$P9_ROPEN(r1, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa5cc554) 00:09:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$evdev(r0, &(0x7f00000002c0), 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/193) 00:09:19 executing program 4: prctl$PR_SET_MM_MAP(0x35, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil}, 0x68) 00:09:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x7fffffff, 0x4) 00:09:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7a6}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001440)={{{@in6=@remote, @in=@multicast2}}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000003b40), &(0x7f0000003b80), &(0x7f0000003bc0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003c00)) 00:09:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xff}) read(r1, &(0x7f0000000240)=""/19, 0x129) 00:09:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x316) sendto$inet6(r0, 0x0, 0xffffffffffffffc1, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @local}, 0x1c) recvmsg(r0, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x2000) 00:09:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f0000000600)='./bus\x00', 0x141042, 0x1) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000010c0)=ANY=[@ANYBLOB]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2}) 00:09:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 00:09:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x316) sendto$inet6(r0, 0x0, 0xffffffffffffffc1, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @local}, 0x1c) recvmsg(r0, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x2000) 00:09:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) 00:09:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000280), 0x4) 00:09:21 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@mcast2}, &(0x7f00000001c0)=0x14) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x0, 0x0) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000280)) ioprio_get$pid(0x2, r0) 00:09:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x316) sendto$inet6(r0, 0x0, 0xffffffffffffffc1, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @local}, 0x1c) recvmsg(r0, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x2000) 00:09:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) dup3(r2, r0, 0x0) 00:09:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/30) 00:09:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f0000000600)='./bus\x00', 0x141042, 0x1) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000010c0)=ANY=[@ANYBLOB]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f0000000600)='./bus\x00', 0x141042, 0x1) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000010c0)=ANY=[@ANYBLOB]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x316) sendto$inet6(r0, 0x0, 0xffffffffffffffc1, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @local}, 0x1c) recvmsg(r0, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x2000) 00:09:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x630d, {0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0}}], 0x0, 0x0, 0x0}) poll(0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 837.470524] binder: 22369:22374 transaction failed 29189/-22, size 0-2305843558969507840 line 3014 [ 837.549239] binder: undelivered TRANSACTION_ERROR: 29189 00:09:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000001840)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) renameat(r1, &(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000140)='./file0\x00') getdents64(r1, &(0x7f0000001780)=""/163, 0xa3) 00:09:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0xf769}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 00:09:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f0000000600)='./bus\x00', 0x141042, 0x1) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000010c0)=ANY=[@ANYBLOB]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f0000000600)='./bus\x00', 0x141042, 0x1) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000010c0)=ANY=[@ANYBLOB]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:24 executing program 0: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:09:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x3}) 00:09:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f000039a000)=[{0x3c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@can, 0x80, &(0x7f0000001840)}}], 0x1, 0x0) 00:09:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1000000000003a, &(0x7f0000534000), &(0x7f0000000040)=0x4) 00:09:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000001c0)=@ethtool_perm_addr}) 00:09:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x3}) 00:09:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f0000000600)='./bus\x00', 0x141042, 0x1) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000010c0)=ANY=[@ANYBLOB]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:25 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) ioctl$void(r0, 0x5451) 00:09:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x19, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 00:09:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f0000000600)='./bus\x00', 0x141042, 0x1) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000010c0)=ANY=[@ANYBLOB]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 00:09:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x3}) 00:09:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x10020a01, 0x0) sendfile(r4, r3, 0x0, 0x7ffffffe) 00:09:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 00:09:26 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffff0000000002"], 0xd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 00:09:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000001001600000000000200010000000000000000000000000005000500000000000a00000000000000fe8800000000000000000000000000ff0000000000000000"], 0x80}}, 0x0) 00:09:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 841.014105] audit: type=1404 audit(1544314166.998:295): enforcing=-1 old_enforcing=2 auid=4294967295 ses=4294967295 [ 841.039973] input: syz1 as /devices/virtual/input/input68 00:09:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0xa0000001}, {{0x0, 0x0, &(0x7f00000043c0)=[{0x0}, {&(0x7f0000004100)=""/97, 0x61}], 0x2}}], 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080)="16", 0x1, 0xc800, 0x0, 0x0) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)}}], 0x400000000000148, 0x0) [ 841.153717] input: syz1 as /devices/virtual/input/input69 00:09:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) 00:09:27 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) 00:09:27 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffff0000000002"], 0xd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 00:09:27 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'team0\x00', {0x2, 0x0, @broadcast}}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req={0xa70, 0x7fffffff, 0x4, 0x3}, 0x10) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x3f) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req={0x7ff, 0x4ec5, 0x8000}, 0x10) fstat(r1, &(0x7f00000002c0)) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) socket$packet(0x11, 0x0, 0x300) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 00:09:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0x40d, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}, 0x8}, 0x0) 00:09:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000140)="2f642d1bb382f92f4ab0702ad800ea0383d816885174ce68ebb2c4fb66e1d5e59a539634b54c2fdbb4ecd743edcf0c0115ae21549e55eec65d33dbad7819f0777d790fc3f2ea3b93e9139745d8690c36b6f95cbdd15c190e93050a431b3829e39b7b8b548aec07c92d3bf5356ed17e7fa86542c430266c276119dfad9a616eaac1689e9aa934dc497ba9f30075fb83a2416e1c4e0577cb8131419847876a028c43ed23b82bf24736e5e8883c3292132696e6db6cb0999ee851d3e95330b9b027f505ec567d895a0ac52ef5a7e1979d71e8a6999d3862d3d9be02441319627f6d32edad048012474d9d5a403dc914f8dc629240d1bbd2a33331198ac83aa1e6c229", 0x0) write$eventfd(r1, &(0x7f0000000380)=0x401, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ifb0\x00'}) 00:09:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_pts(0xffffffffffffffff, 0x0) 00:09:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0xa0000001}, {{0x0, 0x0, &(0x7f00000043c0)=[{0x0}, {&(0x7f0000004100)=""/97, 0x61}], 0x2}}], 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080)="16", 0x1, 0xc800, 0x0, 0x0) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)}}], 0x400000000000148, 0x0) 00:09:28 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffff0000000002"], 0xd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) [ 842.619986] nla_parse: 2 callbacks suppressed [ 842.669033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 842.820083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 00:09:28 executing program 1: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_newrule={0x28, 0x20, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x28}}, 0x0) 00:09:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) write(r0, &(0x7f0000000040)="0a32e7f4a085abff02ac8b0a8ead003b4b5f91917b570de1d183580dce986ffea0604e192b3c4cff29e0211c9a76e9c096a47ca577ffc084fedf1748c44c52d8a457b88faace6f4903da25cfbd6d8ccfd1936fbc5e69213ba1c4d1f0148f89976f7cb4e9a58899ab89788651a7175980b08d9adc5eb95c1038a7a5a03b79c57612b8", 0x82) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff095ffefd956fa283b724a6008c00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 00:09:28 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffff0000000002"], 0xd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 00:09:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0xa0000001}, {{0x0, 0x0, &(0x7f00000043c0)=[{0x0}, {&(0x7f0000004100)=""/97, 0x61}], 0x2}}], 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080)="16", 0x1, 0xc800, 0x0, 0x0) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)}}], 0x400000000000148, 0x0) 00:09:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x28, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) sendto(r0, &(0x7f000002af28), 0xfd09, 0x0, 0x0, 0x0) 00:09:29 executing program 1: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_newrule={0x28, 0x20, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x28}}, 0x0) 00:09:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) 00:09:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0xa0000001}, {{0x0, 0x0, &(0x7f00000043c0)=[{0x0}, {&(0x7f0000004100)=""/97, 0x61}], 0x2}}], 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080)="16", 0x1, 0xc800, 0x0, 0x0) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)}}], 0x400000000000148, 0x0) 00:09:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8004}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) 00:09:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 00:09:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_newrule={0x28, 0x20, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x28}}, 0x0) 00:09:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstatfs(r0, &(0x7f0000000140)=""/138) [ 844.309255] sock: sock_set_timeout: `syz-executor4' (pid 22548) tries to set negative timeout 00:09:30 executing program 4: r0 = epoll_create1(0x0) flock(r0, 0x1) flock(r0, 0x5) 00:09:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_newrule={0x28, 0x20, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x28}}, 0x0) 00:09:30 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0xf08, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00004ce000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000799ffc)=0x7fc, 0x4) recvmsg(r0, &(0x7f0000ee9fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f000034afc4)=""/81, 0x51}, 0x40002102) 00:09:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) 00:09:30 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x800000006, 0x0, 0x0, 0xfffffffffffffffe}]}) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 00:09:30 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000fd7ff0), &(0x7f0000000000), 0x0) 00:09:31 executing program 2: r0 = socket$inet6(0xa, 0x200000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0xfffffffffffffffd, 0x0) 00:09:31 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:09:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@loopback, @local}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@mcast2}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x895ff3b0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty={[0xe000000d2070000]}}, 0x1c) r2 = accept(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffdfd) close(r2) 00:09:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ff8ffc)=0x8005, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 00:09:31 executing program 5: prlimit64(0x0, 0xb, &(0x7f0000000040), &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0), 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 00:09:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x0, @loopback}, 0x104, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='ip6tnl0\x00'}) 00:09:32 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000600)={{0x0, 0x3}}) 00:09:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@loopback, @local}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@mcast2}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x895ff3b0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty={[0xe000000d2070000]}}, 0x1c) r2 = accept(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffdfd) close(r2) 00:09:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@loopback, @local}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@mcast2}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x895ff3b0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty={[0xe000000d2070000]}}, 0x1c) r2 = accept(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffdfd) close(r2) 00:09:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001640)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:09:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) 00:09:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x43732e5398416f1a}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) 00:09:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffff6b1}, 0x0, 0x0, 0x8) rt_sigqueueinfo(r1, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) 00:09:34 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:09:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x43732e5398416f1a}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) 00:09:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@loopback, @local}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@mcast2}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x895ff3b0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty={[0xe000000d2070000]}}, 0x1c) r2 = accept(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffdfd) close(r2) 00:09:34 executing program 0: mkdir(&(0x7f0000000040)='./control\x00', 0x0) open(&(0x7f0000000000)='./control\x00', 0xc40beb2474dfd22a, 0x0) 00:09:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@loopback, @local}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@mcast2}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x895ff3b0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty={[0xe000000d2070000]}}, 0x1c) r2 = accept(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffdfd) close(r2) 00:09:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffff6b1}, 0x0, 0x0, 0x8) rt_sigqueueinfo(r1, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) 00:09:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffff6b1}, 0x0, 0x0, 0x8) rt_sigqueueinfo(r1, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) 00:09:35 executing program 0: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:09:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@loopback, @local}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@mcast2}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x895ff3b0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty={[0xe000000d2070000]}}, 0x1c) r2 = accept(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffdfd) close(r2) 00:09:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x43732e5398416f1a}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) 00:09:35 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:09:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffff6b1}, 0x0, 0x0, 0x8) rt_sigqueueinfo(r1, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) 00:09:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@loopback, @local}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@mcast2}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x895ff3b0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty={[0xe000000d2070000]}}, 0x1c) r2 = accept(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffdfd) close(r2) 00:09:35 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:09:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x43732e5398416f1a}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) 00:09:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x906, 0x54) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) clock_nanosleep(0x0, 0x0, 0x0, 0x0) close(r0) 00:09:36 executing program 5: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) timer_create(0x4, &(0x7f0000000540)={0x0, 0x8, 0x3, @tid=r0}, &(0x7f0000000580)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r6 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1cd3c958182203e777180e872177c95c914b79ba15d988c00d4c231a1b85b54def6865e71f5e64f925d3d967979740c3066eeedbdd1cb9192c21cec7e096b306ab0b8ba03279400ebba4364bf8323fe9e0466ca0bfbef3151864aff16851543cacdeb6af4e0b55e3c6eaf0522014e8c3a6366816707fb8a182455d6a0ef28fde0c6047a60601d500b3aedbd19160add81dde95eec270e80efc64565795c03d789e862dc422b717cb0755934135480e81a95575106bb292b3c6cedb2b9043c64254b88c5c434426ea07aeaa2866f9ba80e755a12e1ea28a2beb7254f65d", 0x0}}, 0x0) r7 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x5) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLERRORu(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400092e0ae8e20000076e65cbad43bfc27a2850e69c83f3163e8387de24ed0000773b"], 0x23) sched_setscheduler(r6, 0x0, &(0x7f0000000200)) setpriority(0x1, r6, 0x5a) recvfrom$inet6(r1, &(0x7f0000000740)=""/191, 0xbf, 0x40, &(0x7f0000000600)={0xa, 0x4e20, 0x6, @mcast2, 0x1000}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0x4, 0xe2d}, 0x1c) sync() getsockopt$bt_hci(r3, 0x0, 0xffffffffffffffff, &(0x7f00000008c0)=""/186, &(0x7f0000000980)=0x866cd3a4d5400878) 00:09:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001140)='/dev/loop#\x00', 0x0, 0x10000000004002) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x804) 00:09:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fgetxattr(r0, &(0x7f0000000180)=@known='system.sockprotoname\x00', 0x0, 0xfffffffffffffca7) 00:09:37 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000f40), 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(r1, &(0x7f0000000880)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)) fstat(r4, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000800)) getpgrp(0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000011c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005680)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000005780)=0xe8) syncfs(0xffffffffffffffff) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 00:09:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001140)='/dev/loop#\x00', 0x0, 0x10000000004002) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x804) 00:09:37 executing program 2: r0 = socket$packet(0x11, 0x200000000000003, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:09:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000f00000000ff3f03000000450001070000001419001a0015000a00070008000200000800005d14a4e91ee438", 0x39}], 0x1) 00:09:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001140)='/dev/loop#\x00', 0x0, 0x10000000004002) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x804) [ 852.169912] netlink: 9 bytes leftover after parsing attributes in process `syz-executor1'. [ 852.233325] netlink: 9 bytes leftover after parsing attributes in process `syz-executor1'. 00:09:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0x10000) 00:09:39 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x149) 00:09:39 executing program 3: clone(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)) 00:09:39 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000f40), 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(r1, &(0x7f0000000880)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)) fstat(r4, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000800)) getpgrp(0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000011c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005680)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000005780)=0xe8) syncfs(0xffffffffffffffff) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 00:09:41 executing program 5: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) timer_create(0x4, &(0x7f0000000540)={0x0, 0x8, 0x3, @tid=r0}, &(0x7f0000000580)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r6 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1cd3c958182203e777180e872177c95c914b79ba15d988c00d4c231a1b85b54def6865e71f5e64f925d3d967979740c3066eeedbdd1cb9192c21cec7e096b306ab0b8ba03279400ebba4364bf8323fe9e0466ca0bfbef3151864aff16851543cacdeb6af4e0b55e3c6eaf0522014e8c3a6366816707fb8a182455d6a0ef28fde0c6047a60601d500b3aedbd19160add81dde95eec270e80efc64565795c03d789e862dc422b717cb0755934135480e81a95575106bb292b3c6cedb2b9043c64254b88c5c434426ea07aeaa2866f9ba80e755a12e1ea28a2beb7254f65d", 0x0}}, 0x0) r7 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x5) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLERRORu(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400092e0ae8e20000076e65cbad43bfc27a2850e69c83f3163e8387de24ed0000773b"], 0x23) sched_setscheduler(r6, 0x0, &(0x7f0000000200)) setpriority(0x1, r6, 0x5a) recvfrom$inet6(r1, &(0x7f0000000740)=""/191, 0xbf, 0x40, &(0x7f0000000600)={0xa, 0x4e20, 0x6, @mcast2, 0x1000}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0x4, 0xe2d}, 0x1c) sync() getsockopt$bt_hci(r3, 0x0, 0xffffffffffffffff, &(0x7f00000008c0)=""/186, &(0x7f0000000980)=0x866cd3a4d5400878) 00:09:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x120}], 0x1, 0x0, &(0x7f0000000100), 0x8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1) 00:09:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local}, {@in=@broadcast, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8, 0x1d, 0x3ff}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}}, 0x0) 00:09:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001140)='/dev/loop#\x00', 0x0, 0x10000000004002) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x804) 00:09:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000080)) renameat2(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) 00:09:41 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000f40), 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(r1, &(0x7f0000000880)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)) fstat(r4, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000800)) getpgrp(0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000011c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005680)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000005780)=0xe8) syncfs(0xffffffffffffffff) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 00:09:41 executing program 0: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, r0+10000000}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) ptrace(0x10, r1) ptrace$peek(0x2, r1, &(0x7f0000000040)) ptrace$poke(0x5, r1, &(0x7f00000001c0), 0x0) 00:09:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) fcntl$setstatus(r1, 0x4, 0x6100) creat(0x0, 0x0) pipe(&(0x7f0000000000)) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x301) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) rmdir(0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x20000000, 0xfffffffffffffffd) lseek(r1, 0x0, 0x2) sendfile(r1, r3, &(0x7f0000000040), 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(r3, 0x8912, 0x0) 00:09:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 00:09:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0001000000000000000004010004010019ca2456d84769b918e7167de290706883bad5b1f93795c060a4d83d88a238ae5716bc6efcf8de52e7426605961d93c7768acd78822193ebe1a0955e68356362e9dd99"], 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, &(0x7f00000005c0)=""/149, &(0x7f00000000c0)=0x95) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) recvfrom(r0, &(0x7f0000000400)=""/224, 0xffffffffffffffdf, 0x1d, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @rand_addr=0xffff}, 0x2, 0x2, 0x2}}, 0x80) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/create\x00', 0x2, 0x0) getpeername(r0, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000003c0)=0x80) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:09:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0300000045000107000000141900160003000000efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 00:09:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 00:09:44 executing program 5: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) timer_create(0x4, &(0x7f0000000540)={0x0, 0x8, 0x3, @tid=r0}, &(0x7f0000000580)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r6 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1cd3c958182203e777180e872177c95c914b79ba15d988c00d4c231a1b85b54def6865e71f5e64f925d3d967979740c3066eeedbdd1cb9192c21cec7e096b306ab0b8ba03279400ebba4364bf8323fe9e0466ca0bfbef3151864aff16851543cacdeb6af4e0b55e3c6eaf0522014e8c3a6366816707fb8a182455d6a0ef28fde0c6047a60601d500b3aedbd19160add81dde95eec270e80efc64565795c03d789e862dc422b717cb0755934135480e81a95575106bb292b3c6cedb2b9043c64254b88c5c434426ea07aeaa2866f9ba80e755a12e1ea28a2beb7254f65d", 0x0}}, 0x0) r7 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x5) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLERRORu(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400092e0ae8e20000076e65cbad43bfc27a2850e69c83f3163e8387de24ed0000773b"], 0x23) sched_setscheduler(r6, 0x0, &(0x7f0000000200)) setpriority(0x1, r6, 0x5a) recvfrom$inet6(r1, &(0x7f0000000740)=""/191, 0xbf, 0x40, &(0x7f0000000600)={0xa, 0x4e20, 0x6, @mcast2, 0x1000}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0x4, 0xe2d}, 0x1c) sync() getsockopt$bt_hci(r3, 0x0, 0xffffffffffffffff, &(0x7f00000008c0)=""/186, &(0x7f0000000980)=0x866cd3a4d5400878) 00:09:44 executing program 3: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) 00:09:44 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000f40), 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(r1, &(0x7f0000000880)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)) fstat(r4, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000800)) getpgrp(0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000011c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005680)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000005780)=0xe8) syncfs(0xffffffffffffffff) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 00:09:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0300000045000107000000141900160003000000efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 00:09:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 00:09:44 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYPTR64], 0x8}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:09:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0300000045000107000000141900160003000000efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 00:09:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 00:09:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000600)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r3, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r3, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80", 0x27, 0xfffffffffffffffa) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r7, &(0x7f0000000040), 0x8000fffffffe) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) sendfile(r2, r7, 0x0, 0xa5cc554) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f00000004c0)=0x14) 00:09:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0300000045000107000000141900160003000000efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 00:09:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200140002000000000000000000000105000600200000000a00000000000010000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff17000b0000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x8000000000000f1, 0x0) 00:09:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0xfffffffffffffee5}, 0xfffffeba) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x100002000000105, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) 00:09:47 executing program 5: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000440)={&(0x7f0000000400)=""/11, 0xb}) timer_create(0x4, &(0x7f0000000540)={0x0, 0x8, 0x3, @tid=r0}, &(0x7f0000000580)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r6 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x9, 0x7, @thr={&(0x7f0000000040)="1cd3c958182203e777180e872177c95c914b79ba15d988c00d4c231a1b85b54def6865e71f5e64f925d3d967979740c3066eeedbdd1cb9192c21cec7e096b306ab0b8ba03279400ebba4364bf8323fe9e0466ca0bfbef3151864aff16851543cacdeb6af4e0b55e3c6eaf0522014e8c3a6366816707fb8a182455d6a0ef28fde0c6047a60601d500b3aedbd19160add81dde95eec270e80efc64565795c03d789e862dc422b717cb0755934135480e81a95575106bb292b3c6cedb2b9043c64254b88c5c434426ea07aeaa2866f9ba80e755a12e1ea28a2beb7254f65d", 0x0}}, 0x0) r7 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x5) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLERRORu(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400092e0ae8e20000076e65cbad43bfc27a2850e69c83f3163e8387de24ed0000773b"], 0x23) sched_setscheduler(r6, 0x0, &(0x7f0000000200)) setpriority(0x1, r6, 0x5a) recvfrom$inet6(r1, &(0x7f0000000740)=""/191, 0xbf, 0x40, &(0x7f0000000600)={0xa, 0x4e20, 0x6, @mcast2, 0x1000}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0x4, 0xe2d}, 0x1c) sync() getsockopt$bt_hci(r3, 0x0, 0xffffffffffffffff, &(0x7f00000008c0)=""/186, &(0x7f0000000980)=0x866cd3a4d5400878) 00:09:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000600)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r3, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r3, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80", 0x27, 0xfffffffffffffffa) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r7, &(0x7f0000000040), 0x8000fffffffe) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) sendfile(r2, r7, 0x0, 0xa5cc554) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f00000004c0)=0x14) 00:09:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback}, 0x18) 00:09:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 00:09:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000100)) read(r1, &(0x7f0000a16000)=""/71, 0x47) 00:09:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="911b39f716f80909a43773341ea2af0cd4d618f19a", 0x15, 0xfffffffffffffff8) r3 = add_key(&(0x7f00000001c0)='big_key\x00', 0x0, &(0x7f0000000380)="86d005eb3db0f0396078da9426006d2fdc867257db4ad7cb484857e2292ea6b831d58ae1cac12f8b59bb9d79147168d4737ba9a42a5959b5a8a329d5d659d6f39db6f4c0770c97ce0667b6234cef6d6b30b8e2e28a925676726f3f47f6d1482bc619bf92dd9d2326a3c9e2b0786a6c6286467b4102bfbf1bcf2c616bb70a88b001fd1c563fd1954d242ef0a76fad3fe6ec29758cd7563a7f207eb514e5674ad0819bbcad411170e6881ff391e48d8d6d13a9e0626bddf76d41ad5e116398f6156f1d2975674e5586dd8ca7ad94d90713afcb9ed87ee4f8a296529c1e5d4a683b886e7d6c5ef4087d451a42aeaaf733b32c24", 0xf2, 0xfffffffffffffffa) keyctl$link(0x8, r2, r3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = eventfd2(0x0, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x8) fchdir(r0) r5 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0xcd55) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0), 0x0, 0x0, &(0x7f0000004fc0)) pipe2(&(0x7f00000002c0), 0x800) 00:09:47 executing program 4: mmap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x0, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 00:09:48 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x801, 0x8012, r0, 0x0) 00:09:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 00:09:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @loopback}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@un=@abs, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000001e00)}}], 0x2, 0x0) 00:09:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000087c0)='/selinux/status\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x2a9) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x202, 0x4) fcntl$setstatus(r3, 0x4, 0x4000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000900)=ANY=[], 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) mkdir(&(0x7f0000000240)='./file0\x00', 0x80000) signalfd4(r5, &(0x7f0000000340), 0x79, 0x80800) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) sendto$packet(r6, &(0x7f0000000480)="60c8c3a6c35e6ad139020000007a18b235d88c5f2fa110bafa563b2c362236209bc045056402986dc8af091008198fd6caeb680a364ec2ff74508a8a113cec5762ae7f2a17b007e8bb7f4ae3a69bb163e7a24139a770e43cd7ebbd51ef897d55454eb22183dc0d61c3ce3858404d86cf6638d90fb248a36710295db6b58d6e7fbd04008e567ce41d6c1984f9f9a3a11d8d", 0x91, 0x4000000, 0x0, 0x0) getpid() ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000280)=0x7b) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000300)=""/30) setpriority(0x2, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280) ptrace$getregs(0xc, r7, 0x1c, &(0x7f00000003c0)=""/171) perf_event_open(&(0x7f0000000780)={0x3, 0x70, 0xfffffffffffffffc, 0x8ad, 0x8001, 0x80000001, 0x0, 0x72c, 0x84080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000580), &(0x7f0000000540)=0x4) ftruncate(r5, 0x80080) poll(&(0x7f00000019c0)=[{r3}, {r6, 0x1000}], 0x2, 0xd58) 00:09:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') pwritev(r0, &(0x7f0000000100), 0x278, 0x0) [ 863.661795] audit: type=1400 audit(1544314189.638:296): avc: denied { create } for pid=22973 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=key permissive=0 00:09:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1}, 0xe) syz_emit_ethernet(0x0, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000002c0)={@mcast2}, 0x14) getpid() 00:09:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000600)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r3, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r3, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80", 0x27, 0xfffffffffffffffa) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r7, &(0x7f0000000040), 0x8000fffffffe) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) sendfile(r2, r7, 0x0, 0xa5cc554) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f00000004c0)=0x14) 00:09:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xc008490b, 0x0) 00:09:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 00:09:50 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) 00:09:50 executing program 5: futex(0x0, 0x88, 0x0, 0x0, 0x0, 0x0) 00:09:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x30}}, 0x0) 00:09:50 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) 00:09:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) 00:09:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 00:09:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) 00:09:51 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) 00:09:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) 00:09:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@delsa={0x28, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x2, 0x32}}, 0x28}}, 0x0) 00:09:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) 00:09:52 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) 00:09:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000600)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r3, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r3, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80", 0x27, 0xfffffffffffffffa) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r7, &(0x7f0000000040), 0x8000fffffffe) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) sendfile(r2, r7, 0x0, 0xa5cc554) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f00000004c0)=0x14) 00:09:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f000059dffc), &(0x7f0000000080)=0x4) 00:09:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) 00:09:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 00:09:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 00:09:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x210007da, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000480)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c00", 0x10}], 0x1}, 0x0) 00:09:52 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 00:09:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='fd\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:09:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) [ 867.024518] SELinux: duplicate or incompatible mount options [ 867.076278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket 00:09:53 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000100)) setxattr$system_posix_acl(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) [ 867.190576] SELinux: duplicate or incompatible mount options 00:09:53 executing program 4: socket(0x0, 0x0, 0x0) clone(0x100002122001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f00000003c0)) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x519, 0x0, 0x0, 0xfffffffffffffffb}]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:09:53 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{}], 0x1, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 00:09:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 00:09:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 00:09:53 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000100)) setxattr$system_posix_acl(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 00:09:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 00:09:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) quotactl(0x80000101, 0x0, 0x0, 0x0) 00:09:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) munlockall() 00:09:54 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000100)) setxattr$system_posix_acl(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 00:09:54 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=""/13, 0xd}}], 0x1, 0x0, 0x0) 00:09:55 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{}], 0x1, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 00:09:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0xffffffffffffffff, &(0x7f0000000100)=0x5a1) 00:09:56 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000500)="0a5c2d024031628571") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000240)=r1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x5) r2 = socket$inet(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000002040)=""/4096, 0x1000, 0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:lost_found_t:s0\x00', 0xfffffffffffffd2a, 0x1) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r3 = gettid() mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2e7174ee77653000"], 0x0, &(0x7f0000000280)='romfs\x00', 0x0, &(0x7f00000002c0)='/selinux/mls\x00') ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) fadvise64(r4, 0x0, 0x0, 0x5) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ptrace(0x18, 0x0) 00:09:56 executing program 2: clone(0x0, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000100)) setxattr$system_posix_acl(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 00:09:56 executing program 5: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) 00:09:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x200) 00:09:56 executing program 1: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x139}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:09:56 executing program 2: r0 = eventfd2(0x0, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) read(r0, &(0x7f0000000080)=""/14, 0xe) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xb3c) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 00:09:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 00:09:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{}], 0x1, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 00:09:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x200) 00:09:57 executing program 2: r0 = perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x9, 0x0, 0x0, 0x3, 0x0, 0x400000000000050b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x8000, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)="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", 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0xffffffffffffffff) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fgetxattr(r2, &(0x7f0000000580)=@random={'system.', '/dev/loop#\x00'}, &(0x7f00000006c0)=""/86, 0x56) sendfile(r1, r2, &(0x7f0000000240), 0x20000102000007) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f00000005c0)=0x1e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x8000000000044000) sendmmsg$unix(r3, &(0x7f0000000040), 0x0, 0x20000010) io_setup(0xb, &(0x7f0000000240)=0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)) io_submit(r4, 0x0, &(0x7f0000000540)) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000640), 0x4) ioctl$LOOP_CLR_FD(r1, 0x4c01) close(r1) syz_genetlink_get_family_id$team(&(0x7f0000000740)='team\x00') 00:09:57 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{}], 0x1, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') [ 872.305942] audit: type=1400 audit(1544314198.288:297): avc: denied { create } for pid=23193 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:09:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x200) 00:09:59 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000500)="0a5c2d024031628571") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000240)=r1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x5) r2 = socket$inet(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000002040)=""/4096, 0x1000, 0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:lost_found_t:s0\x00', 0xfffffffffffffd2a, 0x1) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r3 = gettid() mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2e7174ee77653000"], 0x0, &(0x7f0000000280)='romfs\x00', 0x0, &(0x7f00000002c0)='/selinux/mls\x00') ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) fadvise64(r4, 0x0, 0x0, 0x5) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ptrace(0x18, 0x0) 00:09:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x200) 00:09:59 executing program 5: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x32}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000900)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") creat(0x0, 0x8) write$P9_RWRITE(r0, &(0x7f00000001c0)={0xb, 0x77, 0x2, 0x5}, 0xb) fcntl$setstatus(r1, 0x4, 0x40000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="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") fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x6) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000180)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) sendfile(r4, r2, 0x0, 0x800100000001) 00:09:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x246f) dup3(r0, r1, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:09:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000010c0)={[], 0x3f, 0x6, 0x7f, 0x8000, 0x2, r2}) setpriority(0x2, r2, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7fffffff}}, 0x20) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) sendmmsg$unix(r5, &(0x7f0000001040)=[{&(0x7f0000000380)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000880)="2b7d60d6c492bb79a2e31183ea0ecac9716cb77c57fe65e7e790a3206e2a6f326ea7a894c8fe36513ed418cbd2ee504249387fd1e484da3113b6637f9772cd77bf40da2db33f3886970e5725655992a6b2cb22e16770dee027bf3141e8e383f6792d968b7968cb3bca3f6a8d157399a545dff1ad1ead0cd1d262184c97ef8fec03ab419a3ca6fc5a337a782820d0ef63b3d3d50dda", 0x95}], 0x1, 0x0, 0x0, 0x40}, {&(0x7f0000000a40)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="d95d0bfefbacec007716cc3967825aeb8db4d7ea61c1dafa8e6d5fc02c02b0912097a0137f980655c8f9a520001276484cc6c86417174c633e9fb9216bc2b78fa37e62147f778d84c61283393496492eefe79f9bfc037b72e61f354d9936841acae351d86e3879429666b56c04696287b6f69fc103a7360cd0692dc5f3cf0dde745bc4575816235ac5ce6918a09297f0c6ada5", 0x93}], 0x1, 0x0, 0x0, 0x1}], 0x2, 0x4) fchown(r3, 0x0, r8) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) eventfd(0x9c) connect$unix(0xffffffffffffffff, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) sched_getscheduler(0x0) fchdir(r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000180)={0x6}) 00:09:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0xd, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) 00:09:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback, 0x0, 0x3c}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x2, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 874.017485] audit: type=1400 audit(1544314199.998:298): avc: denied { create } for pid=23214 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:10:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x198) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) setsockopt$packet_buf(r0, 0x107, 0x5, 0x0, 0x0) 00:10:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x246f) dup3(r0, r1, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:10:00 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = getpid() r1 = memfd_create(&(0x7f0000000040)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r1, &(0x7f00000003c0)="04c14e166692f0f8b17500955310060e92aec87568838306f9b1d5a4c28f202a7612b4a3061af475004929e1895a9a0b1d2e15f8e5d7f28c74bb39b9e767bf4a09906b31a08a3fecbc53aa2c0ce4b4573fcd2c46d5e31958259b193b4463bbf0ac4877c3450b1e7c07f2c11ba250779a95dcad49ca162269dfbf6fe2058e54f6dc3b23b3b0d6c9a5531316bc3ccea03528c2ed008927d02ff1176c4f14d61a4ee375d4c0882a26efd8510e98ff9c68d42071f7bee1b2c1fb5dcc14050000000ec24e7d702d235f86f69ea937939dbcd80d61d851934cce045e06330af73d36b92c", 0xe1) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x8000}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setitimer(0x0, &(0x7f0000000100)={{0x0, 0x2710}}, &(0x7f0000000000)) [ 874.705585] audit: type=1400 audit(1544314200.688:299): avc: denied { create } for pid=23214 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:10:01 executing program 3: socket$key(0xf, 0x3, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) fsync(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) keyctl$chown(0x4, r1, r2, 0x0) stat(0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) read$eventfd(r4, &(0x7f0000000480), 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='sit0\x00', 0x8) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x8000fffffffe) 00:10:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x246f) dup3(r0, r1, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:10:04 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000500)="0a5c2d024031628571") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000240)=r1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x5) r2 = socket$inet(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000002040)=""/4096, 0x1000, 0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:lost_found_t:s0\x00', 0xfffffffffffffd2a, 0x1) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r3 = gettid() mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2e7174ee77653000"], 0x0, &(0x7f0000000280)='romfs\x00', 0x0, &(0x7f00000002c0)='/selinux/mls\x00') ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) fadvise64(r4, 0x0, 0x0, 0x5) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ptrace(0x18, 0x0) 00:10:04 executing program 3: socket$key(0xf, 0x3, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) fsync(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) keyctl$chown(0x4, r1, r2, 0x0) stat(0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) read$eventfd(r4, &(0x7f0000000480), 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='sit0\x00', 0x8) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x8000fffffffe) 00:10:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x246f) dup3(r0, r1, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:10:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x400000000000015, 0xfffffffffffffffd, &(0x7f0000000280)=0x114) 00:10:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0) 00:10:04 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r1, 0x9) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$void(r1, 0xc0045878) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) setregid(r3, r3) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000700)=[{&(0x7f0000000640)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ifreq(r1, 0x0, &(0x7f00000002c0)={'Pit0\x00\x00\b\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2710, @host}}) sendto$inet(r5, &(0x7f0000000200), 0x0, 0x200007ff, 0x0, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000240)) sendto$inet(r5, &(0x7f00005c8000), 0x0, 0x0, 0x0, 0x0) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000480)={[], 0x0, 0x401, 0x8, 0x0, 0x1}) recvmmsg(r5, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x325}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x2c33ae77ea3eb9b1, 0x0, &(0x7f0000002a80)={0x0, r6+30000000}) 00:10:04 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000640), 0x28a, 0x0, 0x0, 0x1, r0}]) dup2(r1, r0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:10:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 00:10:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x202102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r7, 0x1000000) sendfile(r6, r7, 0x0, 0xfffffdef) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000300)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000480)=0x0) r9 = getpgrp(r8) sched_setscheduler(r9, 0x1, &(0x7f0000000080)=0x1) fsetxattr$security_ima(r6, &(0x7f0000000000)='security.ima\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="d4fc06dd59508cdc38586985b2f7e41b1ebbe86b68efffe0880e20664b1e475821b7a17f17c84a87b57ed6dccf014402478501c5bfa0ed61cb375c23c0c3080000e1cbf166aaae16a66b5b491ffc49e6c79406cb4dece91c447cc7952d82212eada232fc3ae3dd1bf990f7f98cb431120670b84a4d238ba327c56e286c49e252a8ceff58a1e2df210bef66fe0caea527d52e2beca91909760b80fa69caeda4e961377bfc355430b8682fbe3b4b4cd4a4625135f64168329a"], 0x1, 0x3) connect$unix(r1, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendto$inet6(r0, &(0x7f0000000340)="2a195607f27ed37a628b05a91a8068205a6b63eb2a8b0acd73d956e4d5f85393b7d38cf1cb", 0x25, 0x4008081, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 00:10:05 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 00:10:05 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x9, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0xfffffffffffffcd3) r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/45, &(0x7f00000001c0)=0x56b) 00:10:05 executing program 3: socket$key(0xf, 0x3, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) fsync(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) keyctl$chown(0x4, r1, r2, 0x0) stat(0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) read$eventfd(r4, &(0x7f0000000480), 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='sit0\x00', 0x8) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 879.594803] binder: 23316:23320 transaction failed 29189/-22, size 0-0 line 3014 [ 879.687040] binder: 23316:23321 transaction failed 29189/-22, size 0-0 line 3014 [ 879.734918] binder: undelivered TRANSACTION_ERROR: 29189 [ 879.740530] binder: undelivered TRANSACTION_ERROR: 29189 [ 879.873706] audit: type=1400 audit(1544314205.858:300): avc: denied { create } for pid=23317 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 880.349486] audit: type=1400 audit(1544314206.328:301): avc: denied { create } for pid=23325 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:10:08 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000500)="0a5c2d024031628571") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000240)=r1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x5) r2 = socket$inet(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000002040)=""/4096, 0x1000, 0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:lost_found_t:s0\x00', 0xfffffffffffffd2a, 0x1) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r3 = gettid() mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2e7174ee77653000"], 0x0, &(0x7f0000000280)='romfs\x00', 0x0, &(0x7f00000002c0)='/selinux/mls\x00') ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) fadvise64(r4, 0x0, 0x0, 0x5) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ptrace(0x18, 0x0) 00:10:08 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1f) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0xfffffffffffffffd}, &(0x7f0000000080), &(0x7f00007adff0)={0x77359400}, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) 00:10:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000534000), &(0x7f0000000040)=0x4) 00:10:08 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000040), 0x4) 00:10:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100), 0x1c) sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000940)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x0) 00:10:08 executing program 3: socket$key(0xf, 0x3, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) fsync(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) keyctl$chown(0x4, r1, r2, 0x0) stat(0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) read$eventfd(r4, &(0x7f0000000480), 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)='sit0\x00', 0x8) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x8000fffffffe) 00:10:08 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0), 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000380)=""/93, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) 00:10:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000080)) 00:10:08 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[]}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="000000000800120000ffff1500000000000000fd390000000000000000008001e6ff6300e00000010000000010000000000035000000000008000000000000ff0000e80000c7000000000000000003000500000000006700423b1d632b0100200000c128f6d2eb6eddadc10000000000000800000000000000000000"], 0x7c}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000b00)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x800, 0x20000000c270) r4 = socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7fffffff}}, 0x20) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000005c0)={0x526b, 0x4, 0x0, 0x9, 0x2, 0x4}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r2, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) syncfs(r0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 00:10:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000010a, 0x0) 00:10:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000080)) 00:10:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x11}]]}}}]}, 0x38}}, 0x0) [ 883.707349] Dead loop on virtual device ip6_vti0, fix it urgently! [ 883.730533] Dead loop on virtual device ip6_vti0, fix it urgently! [ 883.792848] Dead loop on virtual device ip6_vti0, fix it urgently! [ 883.860539] Dead loop on virtual device ip6_vti0, fix it urgently! [ 883.914111] Dead loop on virtual device ip6_vti0, fix it urgently! [ 883.960372] Dead loop on virtual device ip6_vti0, fix it urgently! [ 884.703136] Dead loop on virtual device ip6_vti0, fix it urgently! 00:10:12 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000240), &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mount(&(0x7f0000000140), &(0x7f0000000100)='.', &(0x7f00000000c0)='hugetlbfs\x00', 0x3002480, &(0x7f0000000700)) 00:10:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getpgid(r2) 00:10:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000080)) 00:10:12 executing program 2: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) 00:10:12 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000000000000000000000000000000000000000020000009807d7060000000000000000030005000000000002000000ac14ffbb000000000000000000000000000000000000000000000000000000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0206000002000000000000532ddb0000"], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002dc, 0x0) 00:10:12 executing program 0: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3b}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:10:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@loopback}, {@in6, 0x5000000, 0x3c}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}}, 0x0) 00:10:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000080)) 00:10:12 executing program 5: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/create\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$selinux_create(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a73797374656d645f6c6f67696e645f7661725f72756e5f743a733020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73302d73303a63302e63313032332030303030303030303030303030303030303030314940402546445a6dfc22eb8eb737e61506f2a4cb6334f1336f339595501b01052b"], 0x91) [ 886.695781] audit: type=1400 audit(1544314212.678:302): avc: denied { create } for pid=23419 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 886.895921] audit: type=1400 audit(1544314212.878:303): avc: denied { create } for pid=23419 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 00:10:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x2000, 0x4005eed) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18}, 0xff9c) fallocate(r1, 0x3, 0x0, 0x8001) 00:10:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={"000000615a6dc800", 0x400}) close(r1) [ 887.229059] audit: type=1400 audit(1544314213.208:304): avc: denied { create } for pid=23419 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 887.269231] mip6: mip6_destopt_init_state: spi is not 0: 5 00:10:13 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r1, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) sync_file_range(r1, 0x0, 0x7f, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x157}) [ 887.332427] audit: type=1400 audit(1544314213.298:305): avc: denied { create } for pid=23419 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 00:10:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delrule={0x34, 0x21, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @dev}]}, 0x34}}, 0x0) 00:10:13 executing program 2: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:13 executing program 1: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:13 executing program 0: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:13 executing program 3: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:14 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000200)="0422de5d3bbc5b9c914a7579d71892", 0xf) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:10:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x0) [ 888.296546] audit: type=1400 audit(1544314214.278:306): avc: denied { create } for pid=23468 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 888.393801] audit: type=1400 audit(1544314214.338:307): avc: denied { create } for pid=23468 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 888.455250] audit: type=1400 audit(1544314214.438:308): avc: denied { create } for pid=23473 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 888.534196] audit: type=1400 audit(1544314214.518:309): avc: denied { create } for pid=23473 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 888.769255] audit: type=1400 audit(1544314214.748:310): avc: denied { create } for pid=23481 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 888.870256] audit: type=1400 audit(1544314214.848:311): avc: denied { create } for pid=23481 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 00:10:14 executing program 1: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 00:10:15 executing program 2: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 889.286069] binder: 23500:23505 ioctl c0306201 20000000 returned -14 00:10:15 executing program 5: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:10:15 executing program 0: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:15 executing program 3: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 889.985836] input: syz1 as /devices/virtual/input/input70 00:10:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bdd070000a4d119698f1c12750f798058439ed554fa07424adee901d2da75cb85b4b7a1350588743c8d9baf1f02acc7edbcd7a071fb35331ce39c5a8b0bd6dcaf21bc211317ffef33867ccc5b8f1439b56d341662bc8880979843b3355236be93426485f99f87998f48ad7ffa29bda080d701b70d252407218fad612e074583416711ec1053ba40f26809a95171a9") fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0x55f, 0x0) [ 890.251625] input: syz1 as /devices/virtual/input/input71 00:10:16 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') 00:10:17 executing program 1: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x10001) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x14) dup3(r1, r3, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="e7") tkill(r2, 0x1000000000016) 00:10:17 executing program 2: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:17 executing program 0: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:17 executing program 3: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000540)={0x10, 0x0, 0x4}, 0x10) fchdir(r1) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000180)='IPVS\x00', 0x3) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') setxattr$security_smack_transmute(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$P9_RFLUSH(r5, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r5) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0xffff, {{0xa, 0x4e23, 0x0, @local, 0x6}}}, 0x84) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) fgetxattr(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='securityS/\x00'], 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:10:17 executing program 4: socket$inet(0x2, 0x807ff, 0x6) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f0000000103190003000700000000ff1ffe58000000000000000000000000", 0x1f}], 0x1) 00:10:18 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000600)={'bridge_slave_1\x00', {0x2, 0x4e24, @broadcast}}) r2 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000880)=""/219) r6 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000980)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e0ea00010000005e000000000800120002000200000000000000000012000000030300000000000000000000bcbf8b4200000000000000000000000000000001ac141496770000001000000000000000030105000000000002000000e00000010000000072cf3a871b18fa1edcec7fe0b46acae6002ccade9be59b307aac79582cf9908eb1444d418201476dd7cb67151606f7a3f57db346351cd35ef7573c3e0bc9d33259bf7605a391b5bda4137c017a2b8439fc2e307411bb76a01bd7d684ab5d8c174812d34a189b412e8915abd37169996972ca226af486"], 0xf6}}, 0x0) [ 891.977452] audit_printk_skb: 30 callbacks suppressed [ 891.982705] audit: type=1400 audit(1544314217.958:322): avc: denied { create } for pid=23556 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 892.095558] audit: type=1400 audit(1544314218.078:323): avc: denied { create } for pid=23556 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 892.240240] audit: type=1400 audit(1544314218.218:324): avc: denied { create } for pid=23560 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 892.308819] audit: type=1400 audit(1544314218.288:325): avc: denied { create } for pid=23574 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 892.441970] audit: type=1400 audit(1544314218.418:326): avc: denied { create } for pid=23560 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 892.487987] audit: type=1400 audit(1544314218.468:327): avc: denied { create } for pid=23572 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 892.544102] audit: type=1400 audit(1544314218.528:328): avc: denied { create } for pid=23573 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:10:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000000000)={0x1c, 0x20000032, 0x713, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}}, 0x0) [ 892.765473] audit: type=1400 audit(1544314218.688:329): avc: denied { create } for pid=23573 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 893.050128] audit: type=1400 audit(1544314219.028:330): avc: denied { create } for pid=23572 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 893.405927] tc_dump_action: action bad kind [ 893.482498] tc_dump_action: action bad kind 00:10:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 00:10:19 executing program 2: clone(0x40004149, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:10:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r0, 0x800454d3, 0x706000) 00:10:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x1c012, r1, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 00:10:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f00000004c0), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@ipv4_newaddr={0x34, 0x14, 0x5, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x674, 0x2}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x34}}, 0x0) 00:10:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 00:10:20 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 00:10:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x38}}) 00:10:20 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ppoll(&(0x7f000081dfe8), 0x0, &(0x7f000059a000), &(0x7f0000404ff8), 0x8) 00:10:21 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x7ffffffd) 00:10:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x3}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 00:10:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$TIOCNOTTY(r3, 0x5422) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000500)=""/255, &(0x7f0000000380)=0xff) write$P9_RREADDIR(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="450000002901000400000008fdffffff000000001f05002e2f6275730400000000040000000000000000010000000000000005002e2f627573000000000000000000000000"], 0x45) fsync(r4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60") ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000006c0)=0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000300)=0x7) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$TIOCMBIC(r1, 0x5417, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000100)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x2400, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$setstatus(r2, 0x4, 0x5ffb) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x796, 0x4, 0x10001}) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) 00:10:22 executing program 0: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') pipe(&(0x7f0000000500)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 00:10:24 executing program 2: r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2}) 00:10:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 00:10:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x4206, r1) 00:10:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640), 0x28a}]) io_destroy(r1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:10:24 executing program 4: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 00:10:24 executing program 5: r0 = socket(0x200000000010, 0x40000000002, 0x0) write(r0, &(0x7f0000000000)="2400000026007f000000000000007701000000ff0100000000000000fdffffff0100ff01", 0x24) 00:10:24 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000000004c, &(0x7f0000b54ffc), 0x4) 00:10:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) getsockname(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 00:10:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_CARRIER={0x8}]}, 0x28}}, 0x0) 00:10:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) sendfile(r1, r2, 0x0, 0x2007ff) 00:10:24 executing program 4: clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000003010100ffffffff024a5247250002000c0001000500020000ce94bb27b8b35a"], 0x24}}, 0x0) exit(0x0) 00:10:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x7ff) 00:10:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_int(r2, 0x0, 0x4, &(0x7f0000000140)=0x444, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180), 0x4) [ 899.265641] audit: type=1400 audit(1544314225.248:331): avc: denied { create } for pid=23713 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 899.449056] audit: type=1400 audit(1544314225.428:332): avc: denied { create } for pid=23713 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 00:10:26 executing program 1: r0 = memfd_create(&(0x7f0000000200)="2f642d1bb382f92f4ab0702ad800ea0383d816885174ce68ebb2c4fb66e1d5e59a539634b54c2fdbb4ecd743edcf0c0115ae21549e55eec65d33dbad7819f0777d790fc3f2ea3b93e9139745d8690c36b6f95cbdd15c190e93050a431b3829e39b7b8b548aec07c92d3bf5356ed17e7fa86542c430266c276119dfad9a616eaac1689e9aa934dc497ba9f30075fb83a2416e1c4e0577cb8131419847876a028c43ed23b82bf24736e5e8883c3292132696e6db6cb0999ee851d3e95330b9b027f505ec567d895a0ac52ef5a7e1979d71e8a6999d3862d3d9be02441319627f6d32edad048012474d9d5a403dc914f8dc629240d1bbd2a33331198ac83aa1e6c229", 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 00:10:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000000f000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000000), 0x401) 00:10:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_CARRIER={0x8}]}, 0x28}}, 0x0) 00:10:26 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="00001a0000000000"], 0x1) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@srh, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x200000000000ff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, 0x0}, 0x0) 00:10:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000040)={&(0x7f0000002100)=""/4096, 0x1000}) 00:10:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x3) 00:10:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_CARRIER={0x8}]}, 0x28}}, 0x0) 00:10:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f030000004500010700002014190016000407020007000a000200000800005d14a4e91ee438", 0x39}], 0x1) 00:10:26 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) timer_create(0x9, &(0x7f0000000180)={0x0, 0x3a, 0x0, @thr={&(0x7f0000000380), &(0x7f00000001c0)="a6f93ed131f4888aaf365551e97ead58ea7bfbf8bf0f6ad5b4348ac63e0df0c55e57ee4e253589c2c483aa48b750e88435899b084601c0e0aa5e45dce092d8e5f9242982e7ef76edc19fb46597b1715360dd76cff8d0fe13cf0372b7f974c2016f711aa245ee6896fd32125405ef588670e4e5e5587d43d25f0517cd6fb4cdeba2f343d4156148750d1c7dfc4decd977555b13d77f49f0ffb6f6549624dbf6fdd1d1765d415ece7bc1ea6ff1cb0e"}}, &(0x7f0000000000)) 00:10:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:10:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)="6d656d0001792e737761532e63757272656e7400", 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 00:10:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_CARRIER={0x8}]}, 0x28}}, 0x0) 00:10:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, 0x0) 00:10:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f00000000c0)) 00:10:28 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 00:10:28 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x131}}, 0x0) rt_sigaction(0x0, &(0x7f0000000a40)={&(0x7f0000000980)="8f2830ee4d6406c4a201aad12e46f8440fbae332c423e57da80010000200f3420f7e283e42682229d36ac401fc57e5c4429d3b923f91a65e363075e5", {}, 0x0, &(0x7f00000009c0)="c461d17c28c4e21138af6eaaace60fd895091000028fc978d26ef1c401f9160666400f383710660f382a0400436af2c4e3717947dd033666450f381ebdffefffff"}, &(0x7f0000000b00)={&(0x7f0000000a80)="472a03c421fc51100f38cb51dc6446ded5c1739e000f45a5f10069e5460f9396e5e4000066440f28d6410f9a3f66660f6f642f8a", {}, 0x0, &(0x7f0000000ac0)="c402498cbd00000000c461f5ddde420f01d5c402a2f54ab3c42189e0f23e36d9f5c441a1e43a660f383d310f830080000041a5"}, 0x8, &(0x7f0000000b40)) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/152, 0x98}], 0x2, &(0x7f0000001040)=""/4096, 0x1000}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf010000000000000000080012e6c997967e2786f300030000000000000038bf3d1157a7d2a3000000460000ac1414bb00000000000000000004000000000000002400000000000000000000000400a400170000001f0066ff009a46072e9fcc8e1d0700003f00000000000000030000000000000002000b0005"], 0x88}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 00:10:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, {0xe0000304, @broadcast}, 0x3, {0x2, 0x0, @multicast2}, 'lo\x00'}) 00:10:28 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000880)="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", 0x3, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 00:10:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:10:28 executing program 3: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mknod(&(0x7f00000056c0)='./file0\x00', 0xffc, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x7) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)) 00:10:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x800000000008) 00:10:29 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000540)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) chdir(&(0x7f0000000140)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:10:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, {0xe0000304, @broadcast}, 0x3, {0x2, 0x0, @multicast2}, 'lo\x00'}) 00:10:29 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0) listen(r0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000380)={'ip6tnl0\x00'}) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=ANY=[], 0x0, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) bind$inet(r1, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) fcntl$getflags(r2, 0x40a) ioctl$TIOCGSID(r1, 0x5429, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x36b, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socket$packet(0x11, 0xfffffffffffffffc, 0x300) write$P9_RREADDIR(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x132) getpeername$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) getpeername$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x5654807, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000600)={'NETMAP\x00'}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8020040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x810) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000540)={{0x2, 0x4e22, @local}, {0x7}, 0x0, {0x2, 0x4e24, @loopback}, 'nr0\x00'}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000480)={'vcan0\x00', {0x2, 0x0, @broadcast}}) 00:10:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, {0xe0000304, @broadcast}, 0x3, {0x2, 0x0, @multicast2}, 'lo\x00'}) 00:10:29 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="00efa8c1c5b8fecc3f486c3306da26060000008f295ac8bc70070000245c06655a33261a713247851dc0d9c5e6e8b67aea37aa66c00e820346caa3b7c2f8b6a4") r1 = openat$cgroup_ro(r0, &(0x7f0000000040)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) mlockall(0x1) 00:10:29 executing program 3: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mknod(&(0x7f00000056c0)='./file0\x00', 0xffc, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x7) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)) [ 903.804335] audit: type=1400 audit(1544314229.788:333): avc: denied { create } for pid=23818 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:10:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2000000000048, 0x0, 0x0, 0xfffffffffffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:10:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, {0xe0000304, @broadcast}, 0x3, {0x2, 0x0, @multicast2}, 'lo\x00'}) [ 904.446067] audit: type=1400 audit(1544314230.428:334): avc: denied { create } for pid=23818 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:10:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./control\x00', 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f0000000080)='./control\x00', 0x200080, 0x0) [ 905.383431] ip6_tunnel: À xmit: Local address not yet configured! 00:10:32 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='vfat\x00', 0x2000, &(0x7f0000000580)='\x00') lseek(r1, 0x0, 0x4) 00:10:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffe, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80044584, &(0x7f0000000040)=""/39) 00:10:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x30}], 0x1, 0x0) 00:10:32 executing program 3: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mknod(&(0x7f00000056c0)='./file0\x00', 0xffc, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x7) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)) 00:10:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x57, 0x0, 0x20, {0x3}, {}, @ramp={0x2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x15, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0xff12}}, 0x0) io_setup(0x0, &(0x7f0000000140)) 00:10:32 executing program 4: setpgid(0x0, 0xffffffffffffffff) 00:10:32 executing program 4: eventfd(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000240)=@v1={0x1000000, [{0x1}]}, 0xc, 0x1) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) open(0x0, 0x0, 0x0) preadv(r1, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) open(&(0x7f0000000280)='./bus/file0\x00', 0x1, 0x80) 00:10:32 executing program 3: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mknod(&(0x7f00000056c0)='./file0\x00', 0xffc, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x7) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)) 00:10:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) sendfile(r0, r0, 0x0, 0x0) [ 906.685262] netlink: 59 bytes leftover after parsing attributes in process `syz-executor2'. 00:10:32 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') [ 906.785275] netlink: 59 bytes leftover after parsing attributes in process `syz-executor2'. 00:10:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x100000003, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 00:10:33 executing program 1: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4000000037) socket$nl_route(0x10, 0x3, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x31}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ptrace$cont(0x1f, r0, 0x0, 0x0) 00:10:33 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) io_setup(0xa, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) 00:10:33 executing program 4: eventfd(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000240)=@v1={0x1000000, [{0x1}]}, 0xc, 0x1) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) open(0x0, 0x0, 0x0) preadv(r1, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) open(&(0x7f0000000280)='./bus/file0\x00', 0x1, 0x80) 00:10:33 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 00:10:34 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) io_setup(0xa, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) 00:10:34 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast1, @ipv4, @loopback, 0x0, 0x0, 0x0, 0x12b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:10:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000005000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000000000000009aec3f3f7710aa000000ff1700400000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40002ee, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000240)=""/61) 00:10:34 executing program 3: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 00:10:34 executing program 4: eventfd(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000240)=@v1={0x1000000, [{0x1}]}, 0xc, 0x1) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) open(0x0, 0x0, 0x0) preadv(r1, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) open(&(0x7f0000000280)='./bus/file0\x00', 0x1, 0x80) 00:10:34 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 00:10:34 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x80000001) 00:10:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x1, 0xff2d) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000100)=@fragment, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) 00:10:34 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) io_setup(0xa, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) 00:10:35 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) io_setup(0xa, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) [ 909.279371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket 00:10:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="84"], 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x1ab, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/110, 0x6e}}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000002280), 0x97, &(0x7f0000002340)=""/114, 0x223}}], 0x2, 0x0, &(0x7f0000002840)={0x0, r1+10000000}) 00:10:35 executing program 4: eventfd(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000240)=@v1={0x1000000, [{0x1}]}, 0xc, 0x1) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) open(0x0, 0x0, 0x0) preadv(r1, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) open(&(0x7f0000000280)='./bus/file0\x00', 0x1, 0x80) 00:10:35 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 00:10:36 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xa3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x1, 0x0, 0x0, 0x0, 0xf44f, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x8}) syz_open_pts(r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000005440)={'bcsh0\x00'}) getsockopt(r3, 0x1, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x82) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) flock(r2, 0x8) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) accept4$inet(r0, &(0x7f0000005480)={0x2, 0x0, @loopback}, &(0x7f00000054c0)=0x10, 0x800) clock_gettime(0x0, &(0x7f0000005180)={0x0, 0x0}) write$input_event(r0, &(0x7f0000005500)={{}, 0x12, 0x401, 0x11c}, 0x18) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=""/139, 0x8b}}, {{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/38, 0x26}], 0x2, &(0x7f0000000500)=""/198, 0xc6, 0x2}, 0x1ff}, {{&(0x7f0000000600)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000700)=""/15, 0xf}], 0x3, 0x0, 0x0, 0x7cab}, 0xffffffffffffff64}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x9}, 0x40}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/248, 0xf8}, {&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/57, 0x39}, {&(0x7f0000000f00)=""/130, 0x82}], 0x8, &(0x7f0000001040)=""/20, 0x14}, 0x800}, {{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)=""/43, 0x2b}, {&(0x7f0000001140)=""/24, 0x18}], 0x2, &(0x7f00000011c0)=""/150, 0x96, 0xfffffffffffffe00}, 0x200}, {{&(0x7f0000003340)=@xdp, 0x80, &(0x7f0000003500)=[{&(0x7f0000001280)=""/55, 0x37}, {&(0x7f00000033c0)=""/151, 0x97}, {&(0x7f0000003480)=""/88, 0x58}], 0x3, &(0x7f0000003540)=""/190, 0xbe, 0x100}, 0x1ff}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/175, 0xaf}, {&(0x7f0000003740)=""/114, 0x72}, {&(0x7f00000037c0)=""/7, 0x7}], 0x3, &(0x7f0000003840)=""/105, 0x69}, 0x10001}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/216, 0xd8}, {&(0x7f0000003a80)=""/3, 0x3}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/45, 0x2d}, {&(0x7f0000004b00)=""/189, 0xbd}, {&(0x7f0000004bc0)=""/130, 0x82}], 0x7, 0x0, 0x0, 0x2000}, 0x7ff}, {{&(0x7f0000004d00)=@can, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/8, 0x8}, {&(0x7f0000004dc0)=""/228, 0xe4}], 0x2, 0x0, 0x0, 0x7}, 0xffffffffffffe4f0}], 0xa, 0x100, &(0x7f00000051c0)={0x0, r4+30000000}) recvfrom(r3, &(0x7f0000005200)=""/101, 0x65, 0x10000, &(0x7f0000005280)=@ax25={0x3, {"5f1b4f9eb63234"}, 0x100000000}, 0x80) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004cc0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000005100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10002200}, 0xc, &(0x7f00000050c0)={&(0x7f0000005040)={0x80, r8, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5a66}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x80}}, 0x2000c800) write$FUSE_ENTRY(r1, &(0x7f0000005380)={0x90, 0x0, 0x5, {0x3, 0x3, 0x6, 0x10000, 0x3ff, 0x5, {0x5, 0x9, 0xccb8, 0x1c3ccf7f, 0x1ed7, 0x0, 0x9, 0x4, 0x9, 0x5, 0x6, r5, r6, 0x9, 0x3}}}, 0x90) connect(r3, &(0x7f00000012c0)=@nl=@unspec, 0x80) 00:10:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0xff7f) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) r5 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r6, 0x4, 0x40400) ftruncate(r2, 0x2e02) write$FUSE_WRITE(r6, &(0x7f0000000080)={0x18}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 00:10:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:10:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x1) 00:10:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xfffffffffffffffd) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) socket$inet6(0xa, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @multicast2}, @in6}, {0x1, 0x0, 0xfffffffffffffff7, 0x0, 0x5, 0x0, 0x5, 0x200}, {0x0, 0x3, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x14}, 0x0, 0x6c}, 0x0, @in6=@remote, 0x3506, 0x0, 0x0, 0x0, 0xffffffff, 0x5}}, 0xe8) [ 911.980426] audit: type=1400 audit(1544314237.958:335): avc: denied { create } for pid=24065 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 00:10:38 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) getresgid(&(0x7f0000003600), &(0x7f0000000fc0), &(0x7f0000001000)) munlockall() 00:10:38 executing program 0: clock_getres(0xfffffefffffffff4, 0x0) [ 912.471084] ================================================================== [ 912.478494] BUG: KASAN: use-after-free in tcp_write_xmit+0x3b22/0x4680 [ 912.485149] Read of size 2 at addr ffff8801b49a6530 by task syz-executor1/24073 [ 912.492582] [ 912.493147] audit: type=1400 audit(1544314238.468:336): avc: denied { create } for pid=24065 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 912.518133] CPU: 0 PID: 24073 Comm: syz-executor1 Not tainted 4.4.166+ #1 [ 912.525057] 0000000000000000 df60646e3d3ab20d ffff8801db6074e0 ffffffff81aa62ad [ 912.533148] ffffea0006d26980 ffff8801b49a6530 0000000000000000 ffff8801b49a6530 [ 912.541249] dffffc0000000000 ffff8801db607518 ffffffff8148b12b ffff8801b49a6530 [ 912.549309] Call Trace: [ 912.551912] [] dump_stack+0xc1/0x124 [ 912.558018] [] print_address_description+0x6c/0x217 [ 912.564685] [] kasan_report.cold.6+0x175/0x2f7 [ 912.570938] [] ? tcp_write_xmit+0x3b22/0x4680 [ 912.577082] [] __asan_report_load2_noabort+0x14/0x20 [ 912.583828] [] tcp_write_xmit+0x3b22/0x4680 [ 912.589790] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 912.596537] [] ? tcp_rcv_space_adjust+0x450/0x450 [ 912.603022] [] __tcp_push_pending_frames+0xa4/0x2a0 [ 912.609681] [] tcp_rcv_state_process+0xb02/0x4180 [ 912.616163] [] ? tcp_finish_connect+0x470/0x470 [ 912.622473] [] ? sk_filter_trim_cap+0xf1/0x6a0 [ 912.628694] [] ? tcp_v4_rcv+0x220b/0x3750 [ 912.634499] [] ? __inet_lookup_established+0xa7/0x590 [ 912.641344] [] tcp_v4_do_rcv+0x1a5/0x7a0 [ 912.647049] [] tcp_v4_rcv+0x2a84/0x3750 [ 912.652666] [] ip_local_deliver_finish+0x3c0/0xa70 [ 912.659236] [] ? ip_local_deliver_finish+0x12a/0xa70 [ 912.665981] [] ip_local_deliver+0x1ac/0x390 [ 912.671941] [] ? ip_call_ra_chain+0x540/0x540 [ 912.678073] [] ? nf_hook_slow+0x1db/0x340 [ 912.683875] [] ? inet_del_offload+0x40/0x40 [ 912.689847] [] ? nf_hook_slow+0x202/0x340 [ 912.695636] [] ? nf_iterate+0x210/0x210 [ 912.701265] [] ip_rcv_finish+0x759/0x1220 [ 912.707051] [] ip_rcv+0x899/0xfc0 [ 912.712142] [] ? ip_local_deliver+0x390/0x390 [ 912.718297] [] ? consume_skb+0x62/0x3d0 [ 912.723927] [] ? ip_local_deliver_finish+0xa70/0xa70 [ 912.730685] [] ? packet_rcv+0xe7/0x10f0 [ 912.736313] [] ? ip_local_deliver+0x390/0x390 [ 912.742466] [] __netif_receive_skb_core+0x12c8/0x2820 [ 912.749294] [] ? dev_loopback_xmit+0x420/0x420 [ 912.755514] [] ? trace_hardirqs_on+0x10/0x10 [ 912.761559] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 912.768298] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 912.775049] [] __netif_receive_skb+0x5b/0x1c0 [ 912.781186] [] process_backlog+0x20a/0x670 [ 912.787078] [] ? process_backlog+0x1a6/0x670 [ 912.793128] [] net_rx_action+0x367/0xd50 [ 912.798827] [] ? net_rps_action_and_irq_enable.isra.29+0x170/0x170 [ 912.806785] [] ? check_preemption_disabled+0x3b/0x200 [ 912.813614] [] __do_softirq+0x22a/0xa3e [ 912.819228] [] ? release_sock+0x3b6/0x500 [ 912.825017] [] do_softirq_own_stack+0x1c/0x30 [ 912.831146] [] do_softirq.part.2+0x54/0x60 [ 912.837789] [] __local_bh_enable_ip+0xd4/0xe0 [ 912.843939] [] _raw_spin_unlock_bh+0x30/0x40 [ 912.849987] [] release_sock+0x3b6/0x500 [ 912.855600] [] __inet_stream_connect+0x5aa/0xc30 [ 912.861993] [] ? inet_bind+0x8a0/0x8a0 [ 912.867525] [] ? autoremove_wake_function.part.1+0x130/0x130 [ 912.874965] [] ? kmem_cache_alloc_trace+0x117/0x2d0 [ 912.881622] [] tcp_sendmsg+0x1a07/0x2b30 [ 912.887323] [] ? trace_hardirqs_on+0x10/0x10 [ 912.893403] [] ? tcp_sendpage+0x17e0/0x17e0 [ 912.899376] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 912.906924] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 912.913665] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 912.920405] [] ? check_preemption_disabled+0x3b/0x200 [ 912.927231] [] ? inet_sendmsg+0x143/0x4d0 [ 912.933017] [] inet_sendmsg+0x203/0x4d0 [ 912.938632] [] ? inet_sendmsg+0x73/0x4d0 [ 912.944351] [] ? inet_recvmsg+0x4c0/0x4c0 [ 912.950169] [] sock_sendmsg+0xbb/0x110 [ 912.955710] [] SyS_sendto+0x220/0x370 [ 912.961149] [] ? SyS_getpeername+0x2d0/0x2d0 [ 912.967198] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 912.973943] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 912.980692] [] ? __might_fault+0x114/0x1d0 [ 912.986569] [] ? __might_fault+0x18e/0x1d0 [ 912.992446] [] ? __might_fault+0xe4/0x1d0 [ 912.998232] [] ? SyS_clock_gettime+0x11e/0x1e0 [ 913.004500] [] ? SyS_clock_settime+0x210/0x210 [ 913.010725] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 913.017206] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 913.023770] [ 913.025386] Allocated by task 24066: [ 913.029083] [] save_stack_trace+0x26/0x50 [ 913.035026] [] kasan_kmalloc.part.1+0x62/0xf0 [ 913.041295] [] kasan_kmalloc+0xaf/0xc0 [ 913.046962] [] kasan_slab_alloc+0x12/0x20 [ 913.052933] [] kmem_cache_alloc+0xdc/0x2c0 [ 913.058935] [] __alloc_skb+0xe6/0x5b0 [ 913.064516] [] sk_stream_alloc_skb+0xa3/0x5d0 [ 913.070782] [] tcp_sendmsg+0xf81/0x2b30 [ 913.076540] [] inet_sendmsg+0x203/0x4d0 [ 913.082285] [] sock_sendmsg+0xbb/0x110 [ 913.087937] [] SyS_sendto+0x220/0x370 [ 913.093508] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 913.100224] [ 913.101838] Freed by task 24073: [ 913.105184] [] save_stack_trace+0x26/0x50 [ 913.111103] [] kasan_slab_free+0xac/0x190 [ 913.117023] [] kmem_cache_free+0xbe/0x350 [ 913.122955] [] kfree_skbmem+0xcf/0x100 [ 913.128608] [] __kfree_skb+0x1d/0x20 [ 913.134089] [] tcp_connect+0xae9/0x3110 [ 913.139851] [] tcp_v4_connect+0xf31/0x1890 [ 913.145854] [] __inet_stream_connect+0x2a9/0xc30 [ 913.152380] [] tcp_sendmsg+0x1a07/0x2b30 [ 913.158208] [] inet_sendmsg+0x203/0x4d0 [ 913.163952] [] sock_sendmsg+0xbb/0x110 [ 913.169615] [] SyS_sendto+0x220/0x370 [ 913.175204] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 913.181948] [ 913.183563] The buggy address belongs to the object at ffff8801b49a6500 [ 913.183563] which belongs to the cache skbuff_fclone_cache of size 456 [ 913.196902] The buggy address is located 48 bytes inside of [ 913.196902] 456-byte region [ffff8801b49a6500, ffff8801b49a66c8) [ 913.208677] The buggy address belongs to the page: [ 913.219283] usercopy: kernel memory overwrite attempt detected to ffff8801c6975f38 (VM_BUG_ON_PAGE(PageSlab(page))) (1 bytes) [ 913.230800] usercopy: kernel memory overwrite attempt detected to ffff8801c69758a8 (VM_BUG_ON_PAGE(PageSlab(page))) (1 bytes) [ 913.242249] usercopy: kernel memory overwrite attempt detected to ffff8801c6975218 (VM_BUG_ON_PAGE(PageSlab(page))) (1 bytes) SeaBIOS (version 1.8.2-20181112_143635-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 2 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2a10: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 4.4.166+ (syzkaller@ci) (gcc version 8.0.1 20180413 (experimental) (GCC) ) #1 SMP PREEMPT Sat Dec 8 00:04:24 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfffcfff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfffd000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] Hypervisor detected: KVM [ 0.000000] Kernel/User page tables isolation: disabled [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC UC UC UC UC [ 0.000000] e820: last_pfn = 0xbfffd max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f2c80-0x000f2c8f] mapped at [ffff8800000f2c80] [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F2A50 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFFDBA0 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFFF00 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFFDBE0 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFFEC0 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFFEC0 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFFF590 000930 (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFFF4A0 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFFF470 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFFF3A0 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 1499058631 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA32 [mem 0x0000000000001000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfffcfff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:8 nr_cpumask_bits:8 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 41 pages/cpu @ffff8801db600000 s130696 r8192 d29048 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935238 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6609220K/7863916K available (23659K kernel code, 3782K rwdata, 5032K rodata, 1300K init, 23352K bss, 1254696K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2300.000 MHz processor [ 1.108220] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.109479] pid_max: default: 32768 minimum: 301 [ 1.110340] ACPI: Core revision 20150930 [ 1.187062] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.188362] Security Framework initialized [ 1.188967] SELinux: Initializing. [ 1.189715] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.190738] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.194567] Initializing cgroup subsys freezer [ 1.195458] CPU: Physical Processor ID: 0 [ 1.196135] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.197025] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.198053] Spectre V2 : Mitigation: Full generic retpoline [ 1.198869] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 1.200018] Speculative Store Bypass: Vulnerable [ 1.201318] Freeing SMP alternatives memory: 28K [ 1.211736] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.327545] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.329104] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.417728] x86: Booting SMP configuration: [ 1.418450] .... node #0, CPUs: #1 [ 1.419282] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.423521] x86: Booted up 1 node, 2 CPUs [ 1.424168] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 1.426079] CPU1: update max cpu_capacity 1024 [ 1.428689] devtmpfs: initialized [ 1.433365] CPU1: update max cpu_capacity 1024 [ 1.437400] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.439690] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.444208] NET: Registered protocol family 16 [ 1.467540] cpuidle: using governor ladder [ 1.497518] cpuidle: using governor menu [ 1.498565] ACPI: bus type PCI registered [ 1.499263] PCI: Using configuration type 1 for base access [ 1.582165] ACPI: Added _OSI(Module Device) [ 1.582975] ACPI: Added _OSI(Processor Device) [ 1.583631] ACPI: Added _OSI(3.0 _SCP Extensions) [ 1.584322] ACPI: Added _OSI(Processor Aggregator Device) [ 1.596024] ACPI: Executed 2 blocks of module-level executable AML code [ 1.680539] ACPI: Interpreter enabled [ 1.681417] ACPI: (supports S0 S3 S5) [ 1.681960] ACPI: Using IOAPIC for interrupt routing [ 1.683140] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 1.903246] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 1.904384] acpi PNP0A03:00: _OSC: OS supports [Segments MSI] [ 1.905736] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 1.919064] PCI host bridge to bus 0000:00 [ 1.919813] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 1.921072] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 1.922073] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 1.923141] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 1.924274] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.962024] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 2.045859] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 2.052512] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 2.058721] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 2.064937] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 2.068954] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 2.084060] ACPI: Enabled 16 GPEs in block 00 to 0F [ 2.087832] vgaarb: loaded [ 2.090788] SCSI subsystem initialized [ 2.092879] ACPI: bus type USB registered [ 2.094203] usbcore: registered new interface driver usbfs [ 2.095371] usbcore: registered new interface driver hub [ 2.096431] usbcore: registered new device driver usb [ 2.098301] Advanced Linux Sound Architecture Driver Initialized. [ 2.099168] PCI: Using ACPI for IRQ routing [ 2.104240] amd_nb: Cannot enumerate AMD northbridges [ 2.105257] clocksource: Switched to clocksource kvm-clock [ 2.222569] pnp: PnP ACPI init [ 2.247958] pnp: PnP ACPI: found 7 devices [ 2.259350] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 2.261064] NET: Registered protocol family 2 [ 2.264309] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 2.265837] TCP bind hash table entries: 65536 (order: 10, 4194304 bytes) [ 2.270844] TCP: Hash tables configured (established 65536 bind 65536) [ 2.272006] UDP hash table entries: 4096 (order: 7, 655360 bytes) [ 2.274056] UDP-Lite hash table entries: 4096 (order: 7, 655360 bytes) [ 2.275997] NET: Registered protocol family 1 [ 2.276772] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 2.278699] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 2.279601] software IO TLB [mem 0xbbffd000-0xbfffd000] (64MB) mapped at [ffff8800bbffd000-ffff8800bfffcfff] [ 2.281610] RAPL PMU detected, API unit is 2^-32 Joules, 3 fixed counters 10737418240 ms ovfl timer [ 2.282953] hw unit of domain pp0-core 2^-0 Joules [ 2.283608] hw unit of domain package 2^-0 Joules [ 2.284322] hw unit of domain dram 2^-16 Joules [ 2.290576] audit: initializing netlink subsys (disabled) [ 2.291630] audit: type=2000 audit(1544314246.292:1): initialized [ 2.386301] VFS: Disk quotas dquot_6.6.0 [ 2.387820] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 2.402340] Registering sdcardfs 0.1 [ 2.406992] fuse init (API version 7.23) [ 2.425838] cryptomgr_test (31) used greatest stack depth: 28656 bytes left [ 2.438339] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253) [ 2.439592] io scheduler noop registered [ 2.440348] io scheduler deadline registered [ 2.443049] io scheduler cfq registered (default) [ 2.450870] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 2.452037] ACPI: Power Button [PWRF] [ 2.454022] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 2.455408] ACPI: Sleep Button [SLPF] [ 2.456712] Warning: Processor Platform Limit event detected, but not handled. [ 2.457715] Consider compiling CPUfreq support into your kernel. [ 2.482404] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 2.483459] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 2.506772] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 10 [ 2.507863] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 2.513395] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 2.536550] 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 2.561882] 00:04: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 2.587148] 00:05: ttyS2 at I/O 0x3e8 (irq = 6, base_baud = 115200) is a 16550A [ 2.611974] 00:06: ttyS3 at I/O 0x2e8 (irq = 7, base_baud = 115200) is a 16550A [ 2.685894] brd: module loaded [ 2.720851] loop: module loaded [ 2.734804] scsi host0: Virtio SCSI HBA [ 2.748058] scsi 0:0:1:0: Direct-Access Google PersistentDisk 1 PQ: 0 ANSI: 6 [ 3.275667] tsc: Refined TSC clocksource calibration: 2300.005 MHz [ 3.276618] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x212739f6c1c, max_idle_ns: 440795307337 ns [ 3.291652] sd 0:0:1:0: [sda] 4194304 512-byte logical blocks: (2.15 GB/2.00 GiB) [ 3.291751] tun: Universal TUN/TAP device driver, 1.6 [ 3.291754] tun: (C) 1999-2004 Max Krasnyansky [ 3.295985] sd 0:0:1:0: [sda] 4096-byte physical blocks [ 3.302058] sd 0:0:1:0: [sda] Write Protect is off [ 3.307608] sd 0:0:1:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 3.325684] e1000: Intel(R) PRO/1000 Network Driver - version 7.3.21-k8-NAPI [ 3.327197] e1000: Copyright (c) 1999-2006 Intel Corporation. [ 3.328760] sda: sda1 [ 3.328986] PPP generic driver version 2.4.2 [ 3.330348] PPP BSD Compression module registered [ 3.330388] PPP Deflate Compression module registered [ 3.330468] PPP MPPE Compression module registered [ 3.330493] NET: Registered protocol family 24 [ 3.331069] usbcore: registered new interface driver asix [ 3.331429] usbcore: registered new interface driver ax88179_178a [ 3.331783] usbcore: registered new interface driver cdc_ether [ 3.332136] usbcore: registered new interface driver net1080 [ 3.332547] usbcore: registered new interface driver cdc_subset [ 3.332906] usbcore: registered new interface driver zaurus [ 3.333466] usbcore: registered new interface driver cdc_ncm [ 3.333490] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 3.333513] ehci-pci: EHCI PCI platform driver [ 3.335389] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 3.336873] i8042: Warning: Keylock active [ 3.338728] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 3.341304] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 3.346783] mousedev: PS/2 mouse device common for all mice [ 3.352135] usbcore: registered new interface driver xpad [ 3.352490] usbcore: registered new interface driver usb_acecad [ 3.352917] usbcore: registered new interface driver aiptek [ 3.353293] usbcore: registered new interface driver gtco [ 3.353646] usbcore: registered new interface driver hanwang [ 3.354002] usbcore: registered new interface driver kbtab [ 3.356982] rtc_cmos 00:00: RTC can wake from S4 [ 3.360023] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 3.360477] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram [ 3.367088] device-mapper: uevent: version 1.0.3 [ 3.371597] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com [ 3.381653] sd 0:0:1:0: [sda] Attached SCSI disk [ 3.382725] hidraw: raw HID events driver (C) Jiri Kosina [ 3.396772] usbcore: registered new interface driver usbhid [ 3.398061] usbhid: USB HID core driver [ 3.407865] ashmem: initialized [ 3.431129] u32 classifier [ 3.431670] Actions configured [ 3.432356] Netfilter messages via NETLINK v0.30. [ 3.433413] nf_conntrack version 0.5.0 (65536 buckets, 262144 max) [ 3.437749] ctnetlink v0.93: registering with nfnetlink. [ 3.444191] xt_time: kernel timezone is -0000 [ 3.444992] IPv4 over IPsec tunneling driver [ 3.449685] ip_tables: (C) 2000-2006 Netfilter Core Team [ 3.452205] arp_tables: (C) 2002 David S. Miller [ 3.453164] Initializing XFRM netlink socket [ 3.460912] NET: Registered protocol family 10 [ 3.468810] mip6: Mobile IPv6 [ 3.469552] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 3.475482] sit: IPv6 over IPv4 tunneling driver [ 3.482396] NET: Registered protocol family 17 [ 3.483517] NET: Registered protocol family 15 [ 3.488368] registered taskstats version 1 [ 3.492941] rtc_cmos 00:00: setting system clock to 2018-12-09 00:10:47 UTC (1544314247) [ 3.494376] ALSA device list: [ 3.494850] No soundcards found. [ 3.548314] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input2 [ 3.569078] EXT4-fs (sda1): couldn't mount as ext3 due to feature incompatibilities [ 3.572176] EXT4-fs (sda1): couldn't mount as ext2 due to feature incompatibilities [ 3.597846] EXT4-fs (sda1): mounted filesystem without journal. Opts: (null) [ 3.599326] VFS: Mounted root (ext4 filesystem) readonly on device 8:1. [ 3.616655] devtmpfs: mounted [ 3.621449] Freeing unused kernel memory: 1300K [ 3.622349] Kernel memory protection disabled.