7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 497.326757] audit: type=1400 audit(1573508129.362:740): avc: denied { create } for pid=16893 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:29 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfffffff8, 0xb13, 0x20, 0x7f}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x50000) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000140)='sq\"\"#\xa6\xf0(\x12\xac\xbfje\x96\x89% \x8ect\x01\x00\x00\x00\x00\x00\x00\x00_dev\x17p\xf2v\xc8\r\xdb\a3x\xfc\xbbL\xb0\x8d\x95\xc8Sf\xf2Sx\xf4X8\xfbYs\x84\x02.~\x0f\x1b+\xbd\xd5r\xbb\x80\xa0\xff\xd9\x8e\xe4f%\x83\x8e\xda\xb9\xf0\x91\x9fJ\x96W\x89\x9b\x0e4\x05\xaa[\xe2\xf6\xb0m\x86~%o\n\x82\x95\xf7\r\x8e\xb0\x81\x98/\xac?\xdc:\xba\x90\xbd\xc5b\xd6\xad\xd6\xdf\x9c\xda\xf8\xc4n\xf0L\x886\xd4\x89\xd8\x17\xec\xf4\xfa|< [t\xbb/E\x9a\x94o.\xb6\xeb`\x80I\xc9\'?[av\xce\xbd\xbe\x0fN~\x04G\x9e\xd5O\xe6\a\xe3(f\x7fKb\xb2\x11t\x1d\xa3\x04\x00\x00\x00v\xce\xbf\x8e\xf8\x8a\xe8\xf3\x9d-TC\x84eA\xe7\xe1a\xb8\xcf\xf3(9\xbdkX\xb7N\xc4\x8e\xb5\xa9\xf3us\x0e\xe380xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:30 executing program 2: pipe(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x100000000, 0x6, 0x100000000, 0x80000000, 0x6ee4, 0x0, 0x9, 0x0, 0x9, 0x8, 0x75, 0x8}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000180)={0x5, 0x1, 0x81, 0x2, 0x2}) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000300)=0x1) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x8) creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="6b00000075000060000000e9667d65872e5c70319e077bf6969437a260fe155c0229fc60c36767a84e7fa2e63352556526cccc07133f5076afb74d55da442c23a2bbe6c040c846158e8ffd0a608a183aa5cb09e0d6c51f79d1020900c00cb7ba2b17490000000000000000"], 0x6b) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/ptype\x00') openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x800000102009, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 21:35:30 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000500)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r3 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x200) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000f40), &(0x7f0000000f00)=0x3) write(r1, &(0x7f00000007c0)="74aa3489758e12717f01680cf615ed97581c6cd1a98322b3264180cac71a7a355bb125433bb546e0a91803982da47d3729ddf56398fd7e18472688753df6d800ea4d66a6c2edb6ecbf4cf00459fab71eeb3b24b71cd2fbbd00a6dcdd2212e369e397a603007f580a4a6084a45c2be96b5f673a8af47794d8bfde3c83807e04715e75893f5da7f0c0584a67a86acadba3c30fb8c5a83569f5786def325d3a4fbfc37c528d5c8670f3a3608e14ac7f178487779ee348594624e026b42be3f36e78f2b8dbba19a5dd0000", 0xffffffffffffffb3) open(0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet(0x10, 0x3, 0x0) getpgid(0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$binfmt_elf64(r6, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7f, 0x1, 0x40, 0x5, 0x2, 0x3e, 0x7, 0x21a, 0x40, 0xce, 0x280, 0x7, 0x38, 0x1, 0x7, 0x7, 0x1}, [{0x60000000, 0x81, 0x0, 0x1f, 0x3, 0x3, 0x61f, 0x100}, {0x70000000, 0x5, 0x7, 0xbd6, 0x0, 0x4, 0x3, 0x1}], "ebb7a06fa1c7070d138b8d17d3d8a74aa21f4a599363b2b744e5475a7e6a927f3bde1553ccaccea9d3cf5a22ad92ebf36768f9ea8235a0174e8e07a52470f2aa5887d8f1efef024e8c84be9599eead0a73dd341cade624b476611aa1355f97eb3ecc272664a9583810973f714da5cf7948b95e9a7107cd7876d01be86dea6dd86264ddb7701325d50f4e6cf86efbb08a3a18f3d8081901d6253d306a9156c3727532edfbf7f1663ea35fce15d55e851a6c207841ff9b2d843172dca8", [[]]}, 0x26c) sendto$inet(r5, 0x0, 0x2f5, 0x200007fc, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x4}, 0x28) r7 = memfd_create(&(0x7f0000000040)='u', 0x0) dup(r7) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000100)=0x10001) open(0x0, 0x0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000040)="4c0000001200ff09fffefd956fa283b724a6050000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f656e0f9ec3a487", 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000780)}, 0x9}], 0x1, 0x613a, &(0x7f00000001c0)={0x77359400}) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000140)) [ 498.240748] audit: type=1400 audit(1573508130.272:741): avc: denied { create } for pid=16929 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:30 executing program 1: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x24000000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r3, &(0x7f00000001c0), 0xfffffef3) setxattr$security_smack_entry(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='./cgroup.cpu\x00', 0xd, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) fsetxattr$security_smack_entry(r0, &(0x7f00000003c0)='security.SMACK64MMAP\x00', &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x15, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xf2) lseek(r1, 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x7ff) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000004c0)=""/237, &(0x7f0000000380)=0xed) sysinfo(&(0x7f0000000140)=""/32) sendfile(r1, r4, 0x0, 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000680)=0xc) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000740)=ANY=[@ANYBLOB="0000000000e00000030000000000000002000000b900ffff00000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000000000000400000f700000000000000000000000000000000000000000000000000000000007c0000ffff00000000000000010000000000000600000000000000000000000000000000000000000000ff000008000000000000000c00000000000000560c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000200000000000000000000450000000000000000000000008000000f000000000000000000008900eafb462e04f73301000000000000050000000000000000000000000000000000000000000000000100000000210000070000000400000200000000000000d700000000000000050000884b6e5a722796c64e39957c5d1f475e587105eedcd0f698c87b3c500f69d7dff2cfbcb2e9ec4299fb905eec9dc4194cc94b2496998bf99c9cc878851a775828"]) r5 = dup(0xffffffffffffffff) execveat(r5, &(0x7f0000000000)='\x00', &(0x7f00000001c0), 0x0, 0x1000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendfile(r1, r4, 0x0, 0xa5cc554) [ 498.370958] audit: type=1400 audit(1573508130.402:742): avc: denied { create } for pid=16926 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 498.411740] audit: type=1400 audit(1573508130.452:743): avc: denied { create } for pid=16927 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 498.417566] audit: type=1400 audit(1573508130.452:744): avc: denied { create } for pid=16925 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:30 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000000)={0x1, 0x9, "6ce7feba0a5e153d3b"}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001a0007041dfffd946f6105000200000a1f0000030028080008000d00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 498.622884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 498.661245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 498.713365] audit: type=1400 audit(1573508130.752:745): avc: denied { create } for pid=16947 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 498.747704] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 498.760884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 21:35:30 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:30 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 498.912948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 498.944325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 498.956103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:35:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:31 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x3442c0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x40080) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 21:35:31 executing program 0: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000500), 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080), 0x4) fcntl$getflags(r0, 0x3) add_key(&(0x7f0000000180)='dns_resolver\x00', 0x0, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x480040004000, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0x3d) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x20}, r8}, 0xfffffffffffffe35) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r8, 0x1, 0x2, @broadcast}, 0x623892238c419ed1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f") write$selinux_load(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x231) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) [ 499.257932] audit: type=1400 audit(1573508131.292:746): avc: denied { create } for pid=16975 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 499.268588] audit: type=1400 audit(1573508131.292:747): avc: denied { create } for pid=16978 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 499.407820] audit: type=1400 audit(1573508131.442:748): avc: denied { create } for pid=16947 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:31 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:35:31 executing program 4: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x0, 0x1, @tid=r4}, &(0x7f0000000100)=0x0) timer_getoverrun(r5) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r6 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200) ioctl$KDDELIO(r6, 0x4b35, 0x9) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) 21:35:31 executing program 1: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x0) r1 = gettid() clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r2, 0x38) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 21:35:31 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe2(0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)) inotify_init1(0x0) write(0xffffffffffffffff, &(0x7f0000000380)="07eb4aaa2a39cbcb2f0b3a8da322e4a9d2559433f3e3ba86945dd806000000b9901570e60cd5f5225e3f849be4cc8d40", 0x30) syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x2, 0x50d00) pipe(&(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) creat(0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = syz_open_procfs(0x0, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x54042, 0x84) r6 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r7, 0x4c02, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r8, 0x4c02, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r9, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RLERROR(r5, &(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="ec78bee3e0f5b0205c066382a67f3f7ec6253cb252cc84f3358d8de4328710979625c5ebae07d5f83f83", @ANYBLOB="fecee0ba80726a51787b926aa72014e761be51e363223d5c89f124e3ccd603217922fd7818a855d77b3fa7ab4b7c500877a582a8e3251f45c2eaeb4664b74c3bba2f2ab60d3b6335ee6780c3115792f8d613b690a5594742741f2e2bce88e80080f6827c35ffe2eb31b99a236d061aa7a8557de7429dca71d1175e0046144b05735083471eb1b6e86e5737544303c4b50845b68f16cdf222245cf020", @ANYRES16=r9, @ANYRESDEC, @ANYRES32, @ANYRES16=r6, @ANYPTR], @ANYRESHEX, @ANYRESDEC=r7, @ANYRESDEC=r8, @ANYRESOCT, @ANYRES16], 0x5b) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r10, r0) sendfile(r3, r4, 0x0, 0x80000001) 21:35:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:32 executing program 2: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x1f, 0x6, 0x0, 0x0, 0x9265, 0x3f, 0x2, 0x7}, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x800, 0x3f, 0x8001, 0x9}, 0xfffffffffffffffd, &(0x7f0000000180)={r2, r3/1000+10000}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x5, 0x800, 0x8, 0x100000000, 0x10001, 0x400}, &(0x7f00000002c0)={0x7, 0x3, 0x5, 0x40000000, 0x8, 0x2, 0x4, 0x6}, &(0x7f0000000300)={0x0, 0x4, 0x7fff, 0x0, 0x1, 0x40, 0xc03e, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={0x6740}, 0x8}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0xfe) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) inotify_init() dup2(r6, r5) openat$cgroup_type(r6, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="0002000000000000040100c910ff01000d00000000b379f26337296b0b000000622db173ca9a177af8b0b259e5dbee00492a3dfec54984d30c0198d3ca990e8712a7ac3658c1007e6b9036229e10f6920a9b712486c396ed7d8938d6466ec47918429b1b829e69bd2c3ff32ffa79fbdb43eed3d1ffc2b373ecce659bb707915332e9e27b2e1201008719d47e6902f4c881c43c0cef5679a939bbb019dccadf8d55a65867a9c0aec1bbc801ebce2ee8321d9c204c4bf2bffe000000"], 0x20) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 21:35:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:32 executing program 1: r0 = gettid() clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=[&(0x7f00000001c0)='\x00']) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x1, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:35:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:32 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:35:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000000c0)={0x4, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 21:35:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:32 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r0, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r1 = dup(r0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x40, 0x3, 0x7a, 0x0, "4b3c9a4196adb03986d538a247d171c2bec06866ace2720597e2332651d7049d"}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x14, r3}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0x0, 0x0, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @dev}]}, 0x30}, 0x1, 0x0, 0x0, 0x4d14b4c343e86dc6}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20913081}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x846f}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x80}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x6]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xbef9]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8d}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x38}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2a}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x6}, 0x0) socket$inet6(0x10, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) fchdir(r6) io_setup(0x83, &(0x7f00000003c0)=0x0) r8 = socket$inet(0x2, 0xa, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, 0x0, 0x0) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r9, &(0x7f0000000200)='threaded\x00', 0x175d900f) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="d4d0500e17906d0ddab7b8f7cdc69e5639ff3870ea1d30550652e3119c4e9683b7e0c96f95e79d1abba5fe4a84d29071cba9db075c8a9e3f52b0393a9c68ad0c6f7f4edd14296eec692a9dcf005602c36d6e1562409e92737ba604560b4299bbb307d001dddf94fb8c4dbec3d6f7fffffffffffffffe33d6d30640e373cb1048372435711a24b50f0014a762279c182c000000000100000000"], 0x99) r10 = creat(&(0x7f0000000300)='./bus\x00', 0x360) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r10, &(0x7f00000000c0)='threaded\x00', 0x8db9) 21:35:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(0xffffffffffffffff, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:33 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:35:35 executing program 2: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4(r1, &(0x7f0000000280)=@caif=@rfm, &(0x7f0000000300)=0x80, 0x800) fallocate(r0, 0x0, 0x2000424, 0x4) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xfec) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) write(0xffffffffffffffff, &(0x7f00000000c0)="f3e5c094d03c3f7ec56ceb8a633c8a90bff462a13a5dac297ce86d46568fa1775c9734365223e7b3bfa466bde59ca45f74a2c0f8370a9c0ad6f512b99b0978138743f706dce4195dbf9e4dfb1146ae7e3d77f87443f0c568efc8e7ea300d0825174770c06dae7a5a54878b6b0bb72043303dd108962a745d25eb4037731e02dd71f2db3a95896b959434bcc9e4366268b44bc2190f8a481024c8775a65be6e817b93371713ef7eefa498e644a5d4cc0fb6c4b56597014c8f79ffca512f28", 0xbe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) unlink(&(0x7f0000000000)='./file1\x00') 21:35:35 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x2) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x80000000) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) flock(r0, 0x6289a24562e1be60) pipe(0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x4e22, 0x0, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x5, 0x8, 0x0, 0x4, 0xffffffff, 0x0, 0x2]}, 0xfffffffffffffd26) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) flock(r1, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfb120eb7) read(r2, &(0x7f0000000300)=""/242, 0x327) r4 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffffffffffffd, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x1d2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x33fe0) 21:35:35 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:35:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(0xffffffffffffffff, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:35 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r8, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x25b) r10 = socket$inet(0x2, 0x80000, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r10, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r13 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r13) r14 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r15 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r15, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r13, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r20, r18, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r16, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r14, r15, 0x0, 0x180003) 21:35:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000240)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) fchdir(0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) getgid() getgroups(0x0, &(0x7f0000000380)) stat(&(0x7f0000000700)='./bus\x00', 0x0) getegid() fstat(0xffffffffffffffff, &(0x7f00000004c0)) socket$unix(0x1, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pipe(&(0x7f0000000000)) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) getegid() getpgid(0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fchdir(0xffffffffffffffff) getpgid(0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) [ 503.789060] audit_printk_skb: 42 callbacks suppressed [ 503.798995] audit: type=1400 audit(1573508135.832:764): avc: denied { create } for pid=17123 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 503.801227] audit: type=1400 audit(1573508135.822:763): avc: denied { create } for pid=17124 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(0xffffffffffffffff, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:36 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r8, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x25b) r10 = socket$inet(0x2, 0x80000, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r10, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r13 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r13) r14 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r15 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r15, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r13, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r20, r18, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r16, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r14, r15, 0x0, 0x180003) 21:35:36 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800006, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') r9 = socket$inet(0x2, 0x5, 0xd9) ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x80005875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c", 0x20) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000880)="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", 0x133, 0x5, 0x0, 0x1, r8}, 0x0) [ 504.591398] audit: type=1400 audit(1573508136.632:765): avc: denied { create } for pid=17163 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 504.752585] audit: type=1400 audit(1573508136.792:766): avc: denied { create } for pid=17167 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in=@local}, {@in6=@dev, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@dev}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'bcsh0\x00', @ifru_addrs=@llc={0x1a, 0xac338af865e0e8, 0x9, 0x2e, 0x1f, 0x6, @broadcast}}}) 21:35:36 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="b20dec493c823c998d6265e4f7d3b5f4c220c70477f57c4a88e775f332ffadf1d46cbb134816a3f48ac626ba6157f7b7d5428f7cf91be174f7b96f49d0ab798f57c485ddf26808e64218fe5eb30325be00cdb2d7d7b639bcc98c5375b3a2", 0x5e}, {&(0x7f0000001440)="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", 0xf77}, {&(0x7f0000002540)="fe", 0xfffffceb}], 0x3, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000300)=""/149) 21:35:37 executing program 1: clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sched_getparam(r0, &(0x7f0000000140)) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000001c0)={0x8001, 0x5153, 0x6, 0x6, 0x9, 0x7, 0x1, 0x1, 0x4, 0xf0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0xfffffffffffffffe, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x8000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_getevents(r4, 0x4, 0x800000000000134, &(0x7f0000000000), 0x0) io_submit(r4, 0x1, &(0x7f0000000740)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xa59, r3, 0x0}]) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000180)=0xaa) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_evm(r7, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYRES64], 0x1, 0x1) read(r5, &(0x7f0000000200)=""/250, 0xfffffe8a) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) 21:35:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) open(&(0x7f00000001c0)='./file0\x00', 0x101042, 0x0) pipe(&(0x7f0000000380)) socket$inet(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') memfd_create(&(0x7f0000000300)='\x00'/11, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/load\x00', 0x2, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14c80fe606"], 0x5}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 21:35:37 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r8, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x25b) r10 = socket$inet(0x2, 0x80000, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r10, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r13 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r13) r14 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r15 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r15, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r13, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r20, r18, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r16, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r14, r15, 0x0, 0x180003) 21:35:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:37 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r8, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x25b) r10 = socket$inet(0x2, 0x80000, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r10, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r13 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r13) r14 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r15 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r15, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r13, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r20, r18, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r16, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r14, r15, 0x0, 0x180003) [ 505.401568] audit: type=1400 audit(1573508137.432:767): avc: denied { create } for pid=17213 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:37 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$loop(0x0, 0x4, 0x51d00) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xad18ef1f35f2ce89, &(0x7f0000000040), 0x1, 0x0, 0x5a}, 0x20006018) ftruncate(0xffffffffffffffff, 0x0) io_submit(0x0, 0x7, &(0x7f00000019c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0xb54d, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x683cb2b4bc11b951, r0}, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x2000000000, r0, &(0x7f0000000580)="7647b2e6c09afe5e66dcfab7df16ae223d23ecf9879df4e1ad57669bd05c1015c3b0995114793e9adc1ebbde741f8a8004c1810c7df981395d5b62c9c7aa1aa02cd3aa7ef6559e62ef96d17a15cda08b7dd01df2dd63e1485d7beb333e72308a573cbb9464ae9c9f22c9a3d004879a5b127963be1593eaed33038d10e8ee9f99d6a352df8cab52aebb8d4b81a039ff77f32cf605777041b0cb108f99e968f9b8", 0xa0, 0x2, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000440)="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", 0x116, 0xdf9b, 0x0, 0x3, r2}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x65, r3, &(0x7f00000007c0)="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", 0xe0c, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0xffffffff, 0xffffffffffffffff, &(0x7f0000001800), 0x0, 0x0, 0x0, 0x5}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0xd57ea18703433360, 0x0, 0xffffffffffffffff, &(0x7f0000001880)="b6db78d7f4ba81314af85f29b659359d8d5f31366fda534a66bc58fd444ba1fabca895cb7b4662fb7e5d4700f34192ad02acd240b6ef501f4c32c1efd7bd861957332991cf8f15060f692ad534683c3ebb4f9b965e9c7e0b47a144dd300b8860cb21fa2cf15a1392fc28ef4febed55c8d6afb40926af543af19bbbf85907585679ffba52d65c0f80f7d4cdb98d93fef78c0765cdadcfd28f33580266b3da59bfb761cb476ecf1c449d", 0xa9, 0x9}]) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x6, 0x3ff, 0x7, 0x20, 0x18, 0x3, 0x1, 0x7f, 0x80, 0x7, 0xfffffff8, 0x4574}) setitimer(0x1, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r8, 0xffffffffffffffff) sendfile(r6, r7, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 505.618296] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 21:35:38 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r8, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r1, &(0x7f0000000580), 0x25b) r10 = socket$inet(0x2, 0x80000, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r10, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r13 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r13) r14 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r15 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r15, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r13, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r20, r18, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r16, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r14, r15, 0x0, 0x180003) 21:35:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) read(r5, &(0x7f0000000000)=""/250, 0xedf1d44) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r8, 0x4, 0x40400) write$FUSE_WRITE(r8, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r3, 0x4, 0x6100) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r9, &(0x7f0000007e00), 0x40000000000025d, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 21:35:38 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) r3 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r3, 0x2) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffa) sendfile(r2, r4, 0x0, 0xffffffff) unlinkat(r2, 0x0, 0x200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) tkill(r5, 0x38) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x3, 0x0, 0x0, 0x3, 0x8}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) 21:35:38 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x113) getpeername$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ff6000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10) ioctl$sock_ifreq(r0, 0x890b, &(0x7f0000000140)={'ifb0\x02\x00\x00\x00\x02\x00', @ifru_map}) [ 506.273377] audit: type=1400 audit(1573508138.312:768): avc: denied { create } for pid=17252 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 506.325340] audit: type=1400 audit(1573508138.362:769): avc: denied { create } for pid=17260 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 506.432939] audit: type=1400 audit(1573508138.472:770): avc: denied { create } for pid=17269 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:38 executing program 0: openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000200)) io_setup(0x5, &(0x7f00000000c0)) write(r0, &(0x7f00000001c0), 0xfffffffffffffee8) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) socket$inet6(0xa, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000100)=0xf) syz_open_pts(r2, 0x501b82) setrlimit(0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$dupfd(r4, 0x0, r2) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) recvmmsg(r5, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, &(0x7f0000000480)=""/190, 0xbe}, 0x3}, {{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f00000007c0)=""/227, 0xe3}], 0x4, &(0x7f00000008c0)=""/4096, 0x1000}, 0x5697}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/195, 0xc3}, {&(0x7f00000019c0)=""/21, 0x15}, {&(0x7f0000001a00)=""/187, 0xbb}, {&(0x7f0000001ac0)=""/90, 0x5a}], 0x4, &(0x7f0000001b80)=""/185, 0xb9}, 0xffff312c}], 0x3, 0x40002000, &(0x7f0000001d00)={0x0, 0x1c9c380}) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000001d40)={'dummy0\x00', 0x78b}) vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040)=ANY=[], 0x7c774aac) 21:35:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xff}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in=@dev, @in=@multicast2}, {@in6=@loopback, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x100000000000000}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}}, 0x0) 21:35:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:40 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x2c0800, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={r4, r5}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000007abfc4ea71532c0000000000000000004e24ffc14e210101020080b000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) setuid(r5) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'team0\x00', 0x200}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) read(r1, &(0x7f0000000180)=""/33, 0xffffffffffffff91) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ftruncate(r6, 0x6) 21:35:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x7, 0x6d, 0x8000}, 0x7) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r10, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r11 = fcntl$dupfd(r10, 0x406, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x400000000003}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) 21:35:40 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r8, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r1, &(0x7f0000000580), 0x25b) r10 = socket$inet(0x2, 0x80000, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r10, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r13 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r13) r14 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r15 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r15, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r13, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r20, r18, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r16, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r14, r15, 0x0, 0x180003) 21:35:40 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r8, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r1, &(0x7f0000000580), 0x25b) r10 = socket$inet(0x2, 0x80000, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r10, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r13 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r13) r14 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r15 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r15, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r13, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r20, r18, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r16, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r14, r15, 0x0, 0x180003) 21:35:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xc0) sendfile(r2, r3, 0x0, 0x8000fffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r4 = creat(0x0, 0x0) r5 = getegid() ioctl$TUNSETGROUP(r4, 0x400454ce, r5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x2, {0x0, {0x0, 0x1}, 0x0, 0x0, r5, 0xfffffffffffffffd, 0x10003, 0x9, 0x9, 0x800, 0x4, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x4eb, 0x80000001}}, 0xa0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r7, 0x29, 0x0, 0x0, 0x0) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000400)='security.capability\x00', &(0x7f00000005c0)=@v3={0x3000000, [{0x8, 0x1}, {0x6e, 0x71f40d98}]}, 0x18, 0x2) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fstat(r8, &(0x7f0000000380)) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000005, &(0x7f0000000280), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x2) r9 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r10 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r11 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r11, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000100)={0x0, r10}) [ 508.424685] audit: type=1400 audit(1573508140.462:771): avc: denied { create } for pid=17314 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r4 = gettid() tkill(r4, 0x14) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x2, &(0x7f0000000080)={0x8}, 0x8) sendmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) 21:35:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000200)={0xac, 0x29, 0x2, {0x1000, [{{0x3df6c650e393f430, 0x1, 0x1}, 0x4, 0x2, 0x7, './file0'}, {{0x0, 0x3, 0x8}, 0x1f, 0x2, 0xd, './file0/file0'}, {{0x10, 0x4, 0x8}, 0x7, 0x40, 0x7, './file0'}, {{0x1, 0x3}, 0x4, 0x40, 0x7, './file0'}, {{0x58, 0x9, 0x6}, 0xffffffff00000001, 0x51, 0x7, './file0'}]}}, 0xac) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) symlink(&(0x7f00000001c0)='.\x00', &(0x7f00000003c0)='./file0/../file0/file0\x00') umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x4) umount2(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) 21:35:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) fchdir(r0) ftruncate(0xffffffffffffffff, 0x8200) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="e24d151d1c8eb7b83bc559c39842f8d24376fe5dcf13349a180d4ebef38c7c8559626beff0d5847f943b9df153f1ca9d07643f0611456f0793276c935ef759c87773c798673c5569ef02d1efe6ef675afae1b61fa41aeaf70274d590d3211abf12387e04bcc9a938ca23d1fdc8d6806058274c7607495c7e0472652fc81d216ba9439607281f5c8a8f4b7f0d8371043b7599e93c1236a0c20b56", 0x9a, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r4, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r4}, &(0x7f00000002c0)=""/206, 0xce, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000003c0)={0x2, 0x3, 0x7ff, 0x6, 0x6, 0x7f}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000400)='./bus\x00', r1, &(0x7f0000000480)='./bus\x00') clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r6, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000140)='sq\"\"#\xa6\xf0(\x12\xac\xbfje\x96\x89% \x8ect\x01\x00\x00\x00\x00\x00\x00\x00_dev\x17p\xf2v\xc8\r\xdb\a3x\xfc\xbbL\xb0\x8d\x95\xc8Sf\xf2Sx\xf4X8\xfbYs\x84\x02.~\x0f\x1b+\xbd\xd5r\xbb\x80\xa0\xff\xd9\x8e\xe4f%\x83\x8e\xda\xb9\xf0\x91\x9fJ\x96W\x89\x9b\x0e4\x05\xaa[\xe2\xf6\xb0m\x86~%o\n\x82\x95\xf7\r\x8e\xb0\x81\x98/\xac?\xdc:\xba\x90\xbd\xc5b\xd6\xad\xd6\xdf\x9c\xda\xf8\xc4n\xf0L\x886\xd4\x89\xd8\x17\xec\xf4\xfa|< [t\xbb/E\x9a\x94o.\xb6\xeb`\x80I\xc9\'?[av\xce\xbd\xbe\x0fN~\x04G\x9e\xd5O\xe6\a\xe3(f\x7fKb\xb2\x11t\x1d\xa3\x04\x00\x00\x00v\xce\xbf\x8e\xf8\x8a\xe8\xf3\x9d-TC\x84eA\xe7\xe1a\xb8\xcf\xf3(9\xbdkX\xb7N\xc4\x8e\xb5\xa9\xf3us\x0e\xe380xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0x4f) setsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000006c0)={r10, r11}, 0xc) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000000000000000000000004e24ffc14e210101020080b000000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) r12 = socket(0x80000000000000a, 0x2, 0x0) fstat(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r13) fchown(r6, r11, r13) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30}, 0xb0b8) 21:35:41 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) dup3(r5, r4, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r8, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r1, &(0x7f0000000580), 0x25b) r10 = socket$inet(0x2, 0x80000, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r10, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r13 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r13) r14 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r15 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r15, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r13, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r20, r18, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r16, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r14, r15, 0x0, 0x180003) 21:35:41 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x28}, 0x10) r0 = socket$inet(0x2, 0x80a, 0x0) r1 = socket$inet(0x2, 0x80a, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r3) socket$inet(0x2, 0x80a, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0x12f}]) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) [ 509.290260] audit: type=1401 audit(1573508141.322:772): op=setxattr invalid_context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audit: type=1400 audit(1573508141.502:773): avc: denied { create } for pid=17364 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:41 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r4}, 0xc) sendto$packet(r1, &(0x7f0000000000)="d869fdfa866b87b89cafa566926546714143eb28b1a7e840a41fb27e7d643f6218dabdcc629f5f2c4a8e918d8961fa9118b2cfc470b0531d55d354f697", 0x3d, 0x40000, &(0x7f0000000040)={0x11, 0x4, r4, 0x1, 0x3b, 0x6, @dev={[], 0x12}}, 0x14) 21:35:41 executing program 4: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x40000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x13e) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x2}) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fchdir(r2) writev(r1, &(0x7f0000000040), 0x0) read(r0, 0x0, 0x0) 21:35:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) splice(r3, &(0x7f0000000000)=0xbbb9, r4, &(0x7f00000000c0)=0x10000, 0x9, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup2(r5, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$nl_netfilter(0x10, 0x3, 0xc) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$TIOCLINUX2(r8, 0x541c, &(0x7f0000000240)={0x2, 0x5, 0x800, 0x7f, 0x5, 0x2081}) [ 509.524396] audit: type=1401 audit(1573508141.562:774): op=setxattr invalid_context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audit: type=1400 audit(1573508141.862:775): avc: denied { create } for pid=17397 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 21:35:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000180)=0x1ff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fsync(r4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) r5 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r7, 0x0, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) r8 = socket(0x0, 0x80, 0x5) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000340)=0xfffffdd1) syz_open_procfs(r9, &(0x7f0000000640)='\xaep&\xc4c\xe4S\xb5\xfe\xe0\xc0.\x0f\xf8\xfc=\xa4k\x03b\xf6\xf7\x93\x1cx\xe3\xec\xbfB\xa8\xa2\xae\xb1r\x7f\x1fP;\x8e\xa8Yv#\xfat\xce3\xf3C\xd76\xa3\xa5\xc2\xbe\xf6[\xb0\xd0\x9a\xb53I\xf14\xcb\xbb][M\xc0\xcc..\xa9\xd5\x15 \r\x88i\xc4\xdb/\xfe\x80\xce\xc2\x89G\xec\rkb\xea\xe4\xc0-y\x9a\xedo\x89\xee\xcc\xe5\xeb\x18\xcc\xdb\x00\x00\x00\x00\x00\x00E8e\x03\x9f.c\xfddr\x111\x9a\xf1\xd9') syz_open_procfs(r9, &(0x7f0000000400)='net/ip6_tables_matches\x00') r10 = socket(0x0, 0x80, 0x5) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000340)=0xfffffdd1) syz_open_procfs(r11, &(0x7f0000000800)='\xaep&\xc4c\xe4S\xb5\xfe\xe0\xc0.\x0f\xf8\xfc=\xa4k\x03b\xf6\xf7\x93\x1cx\xe3\xec\xbfB\xa8\xa2\xae\xb1r\x7f\x1fP;\x8e\xa8Yv#\xfat\xce3\xf3C\xd76\xa3\xa5\xc2\xbe\xf6[\xb0\xd0\x9a\xb53I\xf14\xcb\xbb][M\xc0\xcc..\xa9\xd5\x15 \r\x88i\xc4\xdb/\xfe\x80\xce\xc2\x89G\xec\rkb\xea\xe4\xc0-y\x9a\xedo\x89\xee\xcc\xe5\xeb\x18\xcc\xdb\x00\x00\x00\x00\x00\x00E8e\x03\x9f.c\xfddr\x111\x9a\xf1\xd9') syz_open_procfs(r11, &(0x7f00000001c0)='net/ip6_tables_matches\x00') getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r12 = socket(0x0, 0x80, 0x5) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000340)=0xfffffdd1) syz_open_procfs(r13, &(0x7f0000000800)='\xaep&\xc4c\xe4S\xb5\xfe\xe0\xc0.\x0f\xf8\xfc=\xa4k\x03b\xf6\xf7\x93\x1cx\xe3\xec\xbfB\xa8\xa2\xae\xb1r\x7f\x1fP;\x8e\xa8Yv#\xfat\xce3\xf3C\xd76\xa3\xa5\xc2\xbe\xf6[\xb0\xd0\x9a\xb53I\xf14\xcb\xbb][M\xc0\xcc..\xa9\xd5\x15 \r\x88i\xc4\xdb/\xfe\x80\xce\xc2\x89G\xec\rkb\xea\xe4\xc0-y\x9a\xedo\x89\xee\xcc\xe5\xeb\x18\xcc\xdb\x00\x00\x00\x00\x00\x00E8e\x03\x9f.c\xfddr\x111\x9a\xf1\xd9') syz_open_procfs(r13, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_open_procfs(r13, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x65, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 21:35:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 510.029559] audit: type=1400 audit(1573508142.062:776): avc: denied { create } for pid=17397 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 21:35:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = dup3(r0, r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) io_setup(0x7, &(0x7f0000000300)=0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r6, 0x0}]) io_submit(r5, 0x2000000000000065, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 21:35:42 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) [ 510.171332] audit: type=1400 audit(1573508142.212:777): avc: denied { create } for pid=17409 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:42 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80040, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') pipe(&(0x7f0000000440)) r5 = memfd_create(&(0x7f0000000300)='/dev/l\xc3op#\x00', 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000340)={0x4, 0x1f, {0x0, 0x8, 0x2, {0x6, 0x3}, {0x3, 0x4}, @ramp={0xfb7, 0xfbf8, {0x9, 0x81, 0x0, 0x40}}}, {0x57, 0x0, 0x7f, {0x1000, 0x1}, {0x6, 0x5}, @ramp={0x7fff, 0x373, {0x6, 0x6b8a, 0x0, 0x4}}}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480)={{r6, r7/1000+30000}, {r8, r9/1000+30000}}) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000003c0)) sendfile(r5, r4, 0x0, 0x2000005) r10 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="3a001a04d71aad66771cdeffa4ed6afefca30000fcac4abc9c9a12ac71bf335433"]}) flock(r10, 0x9) r11 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x12ac80) ioctl$BLKPG(r11, 0x1269, &(0x7f00000001c0)={0x10001, 0x10000, 0x42, &(0x7f00000006c0)="719307b6364de1027232e5ba36c6d687dcab365cee54918b1dbec2c9de2a55b68e20a0d3dcbd5d7107886b06c08bcbcc16824601104039bc19a19d7b75e82979dd55"}) write$P9_RSTAT(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="650000007d010000005e000300dc010000050400000000000000000000000000000801000000090000000de20000000000000b002f6465762f6cc36f7023a1e35c387a4202db66756c6cb08980966465762f6cc36f702300"/101], 0x65) recvfrom$inet6(r0, &(0x7f00000004c0)=""/5, 0x5, 0x40000142, &(0x7f0000000500)={0xa, 0x0, 0xb609, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) mknod(&(0x7f00000005c0)='./file0\x00', 0x10, 0x5) lseek(r0, 0x0, 0x0) [ 510.267549] audit: type=1400 audit(1573508142.302:778): avc: denied { create } for pid=17418 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:42 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:42 executing program 2: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x182) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) dup3(r2, r3, 0xc0000) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x10000012d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) add_key(0x0, &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r0, r7, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0xa, 0x3f) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = getpid() ptrace(0x10, r10) ptrace$getregs(0x2, r10, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x8000, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='wchan\x00') preadv(r11, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/24, 0x18}], 0x1, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='wchan\x00') preadv(r12, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/24, 0x18}], 0x1, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='wchan\x00') preadv(r13, &(0x7f0000000100), 0xfffffffffffff82, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xd5) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000340)={r14, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x4000000000000000, &(0x7f0000000080)="0a5cc8070031") openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r7, 0x0, 0xa5cc554) 21:35:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000180)=0x1ff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fsync(r4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) r5 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r7, 0x0, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) r8 = socket(0x0, 0x80, 0x5) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000340)=0xfffffdd1) syz_open_procfs(r9, &(0x7f0000000640)='\xaep&\xc4c\xe4S\xb5\xfe\xe0\xc0.\x0f\xf8\xfc=\xa4k\x03b\xf6\xf7\x93\x1cx\xe3\xec\xbfB\xa8\xa2\xae\xb1r\x7f\x1fP;\x8e\xa8Yv#\xfat\xce3\xf3C\xd76\xa3\xa5\xc2\xbe\xf6[\xb0\xd0\x9a\xb53I\xf14\xcb\xbb][M\xc0\xcc..\xa9\xd5\x15 \r\x88i\xc4\xdb/\xfe\x80\xce\xc2\x89G\xec\rkb\xea\xe4\xc0-y\x9a\xedo\x89\xee\xcc\xe5\xeb\x18\xcc\xdb\x00\x00\x00\x00\x00\x00E8e\x03\x9f.c\xfddr\x111\x9a\xf1\xd9') syz_open_procfs(r9, &(0x7f0000000400)='net/ip6_tables_matches\x00') r10 = socket(0x0, 0x80, 0x5) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000340)=0xfffffdd1) syz_open_procfs(r11, &(0x7f0000000800)='\xaep&\xc4c\xe4S\xb5\xfe\xe0\xc0.\x0f\xf8\xfc=\xa4k\x03b\xf6\xf7\x93\x1cx\xe3\xec\xbfB\xa8\xa2\xae\xb1r\x7f\x1fP;\x8e\xa8Yv#\xfat\xce3\xf3C\xd76\xa3\xa5\xc2\xbe\xf6[\xb0\xd0\x9a\xb53I\xf14\xcb\xbb][M\xc0\xcc..\xa9\xd5\x15 \r\x88i\xc4\xdb/\xfe\x80\xce\xc2\x89G\xec\rkb\xea\xe4\xc0-y\x9a\xedo\x89\xee\xcc\xe5\xeb\x18\xcc\xdb\x00\x00\x00\x00\x00\x00E8e\x03\x9f.c\xfddr\x111\x9a\xf1\xd9') syz_open_procfs(r11, &(0x7f00000001c0)='net/ip6_tables_matches\x00') getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r12 = socket(0x0, 0x80, 0x5) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000340)=0xfffffdd1) syz_open_procfs(r13, &(0x7f0000000800)='\xaep&\xc4c\xe4S\xb5\xfe\xe0\xc0.\x0f\xf8\xfc=\xa4k\x03b\xf6\xf7\x93\x1cx\xe3\xec\xbfB\xa8\xa2\xae\xb1r\x7f\x1fP;\x8e\xa8Yv#\xfat\xce3\xf3C\xd76\xa3\xa5\xc2\xbe\xf6[\xb0\xd0\x9a\xb53I\xf14\xcb\xbb][M\xc0\xcc..\xa9\xd5\x15 \r\x88i\xc4\xdb/\xfe\x80\xce\xc2\x89G\xec\rkb\xea\xe4\xc0-y\x9a\xedo\x89\xee\xcc\xe5\xeb\x18\xcc\xdb\x00\x00\x00\x00\x00\x00E8e\x03\x9f.c\xfddr\x111\x9a\xf1\xd9') syz_open_procfs(r13, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_open_procfs(r13, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x65, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 510.732050] audit: type=1400 audit(1573508142.772:779): avc: denied { create } for pid=17444 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) set_thread_area(&(0x7f0000000040)={0x7, 0x20001000, 0x4000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOFFLOAD(r0, 0x800454d3, 0x71b000) [ 511.251629] audit: type=1400 audit(1573508143.292:780): avc: denied { create } for pid=17471 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:43 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:43 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070fab092500090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc0002", 0xfffffffffffffde8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="c8ae040400000000000000c7ee8e80400000002af0fbd6ea978f91ca8345f5946c37f15e3cd45f63b33dc7e7a917ddb7d301593b3da4c6074d18", @ANYRES16=r9], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r9, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0xfffffffffffffeb1, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xfffffffffffffefc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x8008080) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x80000, 0x0) ioctl$TCFLSH(r10, 0x540b, 0x7) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000084}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="180256cc89bcba1697934a1b0000", @ANYRES16=r9, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x4}, 0x30) 21:35:43 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000016003f0400000000000000040a12000021fe008014000100fe8000000000000000000000000000aa"], 0x1}}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rt_acct\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket(0x10, 0x80002, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:35:43 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80040, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') pipe(&(0x7f0000000440)) r5 = memfd_create(&(0x7f0000000300)='/dev/l\xc3op#\x00', 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000340)={0x4, 0x1f, {0x0, 0x8, 0x2, {0x6, 0x3}, {0x3, 0x4}, @ramp={0xfb7, 0xfbf8, {0x9, 0x81, 0x0, 0x40}}}, {0x57, 0x0, 0x7f, {0x1000, 0x1}, {0x6, 0x5}, @ramp={0x7fff, 0x373, {0x6, 0x6b8a, 0x0, 0x4}}}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480)={{r6, r7/1000+30000}, {r8, r9/1000+30000}}) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000003c0)) sendfile(r5, r4, 0x0, 0x2000005) r10 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="3a001a04d71aad66771cdeffa4ed6afefca30000fcac4abc9c9a12ac71bf335433"]}) flock(r10, 0x9) r11 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x12ac80) ioctl$BLKPG(r11, 0x1269, &(0x7f00000001c0)={0x10001, 0x10000, 0x42, &(0x7f00000006c0)="719307b6364de1027232e5ba36c6d687dcab365cee54918b1dbec2c9de2a55b68e20a0d3dcbd5d7107886b06c08bcbcc16824601104039bc19a19d7b75e82979dd55"}) write$P9_RSTAT(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="650000007d010000005e000300dc010000050400000000000000000000000000000801000000090000000de20000000000000b002f6465762f6cc36f7023a1e35c387a4202db66756c6cb08980966465762f6cc36f702300"/101], 0x65) recvfrom$inet6(r0, &(0x7f00000004c0)=""/5, 0x5, 0x40000142, &(0x7f0000000500)={0xa, 0x0, 0xb609, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) mknod(&(0x7f00000005c0)='./file0\x00', 0x10, 0x5) lseek(r0, 0x0, 0x0) 21:35:43 executing program 1: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r2, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}}, 0x28) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r4, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$dupfd(r7, 0x406, 0xffffffffffffffff) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x200203, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) r8 = accept(0xffffffffffffffff, &(0x7f0000000340)=@xdp, &(0x7f0000000400)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000840)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0x2b1) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571") sendfile(r2, r4, 0x0, 0xa5cc554) [ 511.648541] audit: type=1400 audit(1573508143.682:781): avc: denied { create } for pid=17483 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 511.686568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 21:35:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x80, 0x5) r1 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r1, 0x0, 0x80005) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r7 = syz_open_procfs(r6, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r1, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r6, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) 21:35:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x12) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') 21:35:44 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r2, 0x11, 0x0, 0x8020003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x480001) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, &(0x7f00000000c0)={0xc, 0x6, 0x7}) 21:35:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0xffff, 0x1) io_setup(0x3, &(0x7f0000001300)=0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x3, 0x1, 0x2, r4}) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 21:35:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r1 = open(&(0x7f0000000000)='./file1\x00', 0x28500, 0x148) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000000c0)=0x3ff, 0x4) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 21:35:44 executing program 1: keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000100)=0x400, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) creat(0x0, 0x0) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x200) listen(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_setup(0x3, &(0x7f0000000180)) pipe(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1420000a77, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1f00000000000000000000000000000000000800000000020000000000000000000000000000000000000000cbb83482db868431e7c07649592c59ca4940"]}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r6, &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f0000000280)='/\x00', 0x2, 0x2) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x4) 21:35:44 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$TCFLSH(r0, 0x540b, 0x8) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000600)={0x4}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000080)="801f56b7569193cb4e8141a8f5a5a7a4db20008ca9b255697b7f598c397e89aa43bd55d87d711c2f95d304f8402e2230842f2ba4444c5ee38c702984b895aa48d15de5d12a759f691e7c4c9d84a138f28c7a0249a0cb69af07292345fc2f70a55b91de076aba805417b7fca4d7377e3f644311a6498d79fb5a5dafd525ecaf3dc5e8fc7373b661c226cbf0d7627e3811d3fc062f34d4059960daa16ff5b50b07f5d8deb559239d6127517e6ba25afe272374ecec5be059605f71be6c4e", 0xbd}, {&(0x7f0000000140)="97af9ddadd0efa4bb882e68d35ac417533a4c27fe40a6ae73a3fe91bf682c3b13f9931f5fc02373570e1d2e1f4203629c346d03540c73149e7ecf2046ab7af5c903b9cb050a45322b4eb9b4330e1b5ea147f6bbe788e97582834ccd8e9b384", 0x5f}, {&(0x7f00000001c0)="09a9637d1b92a752d6971e59e63c388d0f80415022783136dda8d863b8293215b3e1", 0x22}], 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8c0060}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, r12, 0xf6b98f7d4236dc16, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40414}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r1) fsetxattr(r13, &(0x7f0000000640)=@known='trusted.overlay.opaque\x00', &(0x7f0000000680)='&*$GPL+vboxnet0system/trusted%(:\x00', 0x21, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendfile(r1, r2, 0x0, 0x80000001) 21:35:44 executing program 2: io_setup(0x9, &(0x7f00000002c0)=0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x3, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="99", 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffd8, r5, 0x0}, 0x0]) 21:35:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x80, 0x5) r1 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r1, 0x0, 0x80005) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r7 = syz_open_procfs(r6, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r1, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r6, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) 21:35:45 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x0) r2 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000000c0)) sendmmsg(r3, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fchown(r1, 0x0, r4) r5 = syz_open_dev$evdev(0x0, 0x1, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r6 = getpid() creat(&(0x7f00000001c0)='./bus\x00', 0x200000002) setpgid(r6, 0x0) rt_tgsigqueueinfo(0x0, r6, 0x1, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x200, 0x8) r7 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r7) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x3b, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x8) getsockopt$inet6_opts(r8, 0x29, 0x3b, 0x0, &(0x7f00000000c0)=0x215) fcntl$dupfd(r8, 0x0, r5) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r9, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) openat$cgroup_ro(r3, &(0x7f00000005c0)='memory.stat\x00', 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x4}) 21:35:45 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:45 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000140)={0x0, 0x5, 0x417}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x1}]}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000200), 0x8, 0x0) getpid() ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000080)) prctl$PR_SVE_SET_VL(0x32, 0x12ab) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 21:35:45 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x8, 0x3, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:35:45 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x88000e, 0x0, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0240ff090e1200000600008c8e828ff904ea8000000000000a0000000000000400f7ffffffffcd0dff00002100000000eff50020000010000200010001000000000000edfffd000005e9ca26b4a35691a7ce59fff2"], 0x49}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 21:35:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x80, 0x5) r1 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r1, 0x0, 0x80005) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r7 = syz_open_procfs(r6, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r1, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r6, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) 21:35:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x80, 0x5) r1 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r1, 0x0, 0x80005) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r7 = syz_open_procfs(r6, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r1, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r6, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) 21:35:46 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:46 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x143) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000006c0)="665138d0efbc56f8734235554e917f0bc3767b9e8a6778835afb275f0cefbd38980d8407177860e7cb0c19458011769f0b5cd6e6a87b240a430f0cedfcee183e2d2e1c3c50f45b2622a80b575f915b4a45bbd26c3e426f7491f84668fd08f3a64ebc8c2d0f2627f49f412624f94e30af7018afcddcc53499678f08fc52c245e96e55e26547370929b35ac4b7370801b94490e302ee6fde9ff3366b11c6159c918a9737678bb596b2756e2d0fd13905047b77f4d7dac498c76ffea8ebd9bf1ff37e42a1", 0xffffffffffffff75, 0x40000, 0x0, 0xfffffffffffffe1c) sendmmsg(r0, &(0x7f0000000200), 0x29e, 0xfffffffffffffffc) socketpair(0x18, 0x2, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) listen(r0, 0x80) r1 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000500)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x800) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00', 0x3c02}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{}, 0x0, @in6=@mcast1}}, 0xe8) sendmmsg(r5, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000540)=0x3, 0x4) sendto$inet6(r4, &(0x7f00000000c0), 0x1000000ae, 0x0, 0x0, 0x1f1) [ 514.573081] audit_printk_skb: 21 callbacks suppressed [ 514.578318] audit: type=1400 audit(1573508146.612:789): avc: denied { create } for pid=17638 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 514.623116] audit: type=1400 audit(1573508146.662:790): avc: denied { create } for pid=17638 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x900a283}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf250f0000001400060008000100ab0a0000080001004000000014000700080002000600000008000100feffffffa40004003c0007000800040008000000080004000002000008000300a400000008000300050000000800030000000000080001000300000008000400480a00001400010062726f6164636173742d6c696e6b00001400070008000300ffffffff08000100060000003bf1070008000100010000000800010012000000080002000500000008000400a0e9de1d0800030001000000080003007f000000080001000a0000007599e13cb4c4c40d4c2a59bbb10d4fde"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 21:35:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(0x0, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:46 executing program 0: pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab", 0x12) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0) sendto$unix(r2, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000002c0), 0x4) sendfile(r4, r4, &(0x7f0000000240), 0x2008000fffffffe) syz_genetlink_get_family_id$nbd(0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1) socket(0xb, 0x5, 0x0) fchdir(0xffffffffffffffff) ioctl$void(r0, 0x0) 21:35:46 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 514.975194] audit: type=1400 audit(1573508147.012:791): avc: denied { create } for pid=17652 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 515.090455] audit: type=1400 audit(1573508147.122:792): avc: denied { create } for pid=17654 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 515.155115] audit: type=1400 audit(1573508147.192:793): avc: denied { create } for pid=17652 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 515.202779] audit: type=1400 audit(1573508147.242:794): avc: denied { create } for pid=17656 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair(0x2, 0x1, 0x6, 0x0) getsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:35:47 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0x0, 0x3f, 0x2b}, 0x2c) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) syz_open_procfs(r6, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="040b25bd7000ffdbdf2501000000074100ddff4c04180000040073797a310000000000000000000000000000000000000000000000000000000000000000100000000000000000ffe4f5ffffffffffffff000000000d000043ae00000000abcbb86a297e49b5e892140bc0f603750459ad24738b77aec83ccb2032e68a46671117836be49a1e5cb9f6d59d8e000000008aba323c055228b13ca2cc5e6f"], 0x1}, 0x1, 0x0, 0x0, 0x4004050}, 0x1) getuid() getresgid(0x0, 0x0, 0x0) r8 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r9, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = getgid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r11, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, 0x0, 0xfffffffffffffebd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r13) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000640)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRESDEC=r7, @ANYRES32=r10, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r11, @ANYRES32, @ANYRES32=r3, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="7879b09492388c4360"], 0x8d, 0x30000010}, 0x24e1) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes 21:35:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(0x0, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:48 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000b80)={0x0, 0x8d}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') creat(&(0x7f0000000000)='./file0\x00', 0x80) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) shutdown(r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) write$P9_RLOPEN(r2, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x7ed7a25bdab73ed1, 0x0, 0x3}, 0xa03}}, 0x18) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 21:35:48 executing program 1: r0 = socket(0xb, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='\xa3g\xe5\x02\x1b') fchdir(r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDENABIO(r3, 0x4b36) open(0x0, 0x0, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) fchdir(r1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) socketpair(0x5, 0xa, 0xfffffffffffffff8, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000740)="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", 0x10000029d) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0xa2) r6 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) io_setup(0x5d, &(0x7f0000000180)) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/184, 0xb8}], 0x1, &(0x7f00000008c0)=""/148, 0x94}, 0xb754cd73eda56432) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f00000003c0)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x8, 0x6}, 0x4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004140)={'team0\x00'}) sendmmsg(r4, 0x0, 0x0, 0x0) write$cgroup_type(r7, &(0x7f0000000340)='threaded\x00', 0xa95300ba) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r9, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 21:35:48 executing program 0: pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab", 0x12) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0) sendto$unix(r2, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000002c0), 0x4) sendfile(r4, r4, &(0x7f0000000240), 0x2008000fffffffe) syz_genetlink_get_family_id$nbd(0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1) socket(0xb, 0x5, 0x0) fchdir(0xffffffffffffffff) ioctl$void(r0, 0x0) 21:35:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(0x0, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:48 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 516.948961] audit: type=1400 audit(1573508148.982:795): avc: denied { create } for pid=17699 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 517.132263] audit: type=1400 audit(1573508149.172:796): avc: denied { create } for pid=17702 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 517.216442] audit: type=1400 audit(1573508149.252:797): avc: denied { create } for pid=17712 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = accept4$packet(r0, 0x0, &(0x7f0000000080), 0x180000) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='gre0\x00'}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) creat(&(0x7f0000000180)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)=""/225, 0xfe020e65e745d82e) setsockopt$packet_int(r1, 0x107, 0x1, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000116, 0x0) 21:35:49 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) INIT: Id "6" respawning too fast: disabled for 5 minutes 21:35:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(0x0, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r7}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:49 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:35:49 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x800) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/stat\x00') pipe(&(0x7f0000000500)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={r4, r5}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000000000000000000000004e24ffc14e210101020080b000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x250003, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x20}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1600}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6076}}, {@blksize={'blksize', 0x3d, 0x1a00}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system!'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@audit='audit'}]}}) open(&(0x7f0000000080)='./file0\x00', 0x2081, 0x102) INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes [ 518.093818] audit: type=1400 audit(1573508150.112:798): avc: denied { create } for pid=17746 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:50 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x800) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/stat\x00') pipe(&(0x7f0000000500)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={r4, r5}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000000000000000000000004e24ffc14e210101020080b000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="ffffffff4f000000400103006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a8070000064d63a690f12f5c4578fbe90c614a204dab8a0ecd3983cc109492a021b47835b923377517db10373472e53fe8979dd1b76158ccd36ed115711a9c0e2b4cd07fb1babf080f253802f7f66d4487628343fea938f9178096fcf0cfdf716de5cee477c1a6289bddfcd829fb05df0da28ffd2121d6cbc127f8ce0f2df074ab897ad4d79d4d2108a7bc0700eee1cb18b3ac3b9f67c936d0ee732655bf1bfd71cb2384f4351c895aa678993b6c14b1ceee09094f603d679257a29daa0142ff7ef239a35bb6bce35d33d04f1dac7986eee2640a87a2b49aa2cca8f9985974b824ee3ee9dd5cea9bce59292a3e06f3d9e8af8b070d522c000000"], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x250003, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x20}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1600}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6076}}, {@blksize={'blksize', 0x3d, 0x1a00}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system!'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@audit='audit'}]}}) open(&(0x7f0000000080)='./file0\x00', 0x2081, 0x102) 21:35:50 executing program 1: r0 = socket(0xb, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='\xa3g\xe5\x02\x1b') fchdir(r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDENABIO(r3, 0x4b36) open(0x0, 0x0, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000400)) fchdir(r1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) socketpair(0x5, 0xa, 0xfffffffffffffff8, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000740)="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", 0x10000029d) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0xa2) r6 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) io_setup(0x5d, &(0x7f0000000180)) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/184, 0xb8}], 0x1, &(0x7f00000008c0)=""/148, 0x94}, 0xb754cd73eda56432) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f00000003c0)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x8, 0x6}, 0x4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004140)={'team0\x00'}) sendmmsg(r4, 0x0, 0x0, 0x0) write$cgroup_type(r7, &(0x7f0000000340)='threaded\x00', 0xa95300ba) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r9, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 21:35:50 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000100)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) 21:35:50 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:35:50 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r0, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e20, @broadcast}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000280)=""/161, 0x3cb}], 0x1, 0x0) 21:35:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ftruncate(r3, 0x2081fd) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8000fffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xfffffffffffffccc, 0x19, 0x0, {0x0, {0x8, 0x1, 0x2}, 0x100010014, 0x0, 0x0, 0x0, 0x8000, 0x42cf6d26, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x1f, 0x4, 0x0, 0xffff, 0x0, 0xfffffffffffffffd}}, 0xa0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r6, 0x29, 0x0, 0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) read(r7, 0x0, 0x1002b) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x50800, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000005, &(0x7f0000000280), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) 21:35:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00,\xc6M\xec\xd8`\x0f\x9b\xdaj\xac\x8a?>\x11\x98\xd0\xe4\x90\xf8\xe1\x00\xd7Z\xce\xc8\xc5\xc6\x19\x87\x1a\x01\xd2\xce\x11\x04\xfa\x95dH@c\xdd\x1do6Pj/\x9c\x13\xa7\x9e\xb58u+\x06\x81\xd2/u\xc7ysl\t\x97\xf8o}\x7f\x8e\x99=\xd4\xd6\x03\xd9\xe3\x89\xe9\x14dE-\xed\xe2Z\xd0\xe3Qp\xe4=@\xfc\xa0\xc5m\xa0)\xb8\xba\x05{\xe2}Eq\xf3\x05\xdc\xa9\xae\xc4m\x11\r}u\vH\x14\x96\xd0\xb2\xef\x02}\xc3\xacq\xdb\x89`\xc8\xea\x06\x9bj(\xbe\xa0\xb9\xfa\x98\xa1zl\x83\xa9\xcd\v0!i(\xd8\xb9\xcc\x91\xe9\x82yx\x00wn\x9f\xa8\xf2B\xe2\xa7\xec\xc33\x99\xb7\x19z\xddW\xe2,Co\xef') readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000540)=""/106, 0x6a}], 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth0_to_bond\x00', 0x2}) readv(r0, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000400)=""/261, 0x105}], 0x2) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000001c0)) 21:35:51 executing program 0: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x24000000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000440)='./bus\x00', 0xfffffffffffffffe) fcntl$setstatus(r1, 0x4, 0x6100) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0x0) write(r3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sysinfo(&(0x7f0000000140)=""/32) sendfile(r1, r4, 0x0, 0x8000fffffffe) memfd_create(&(0x7f00000003c0)='u', 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 21:35:51 executing program 4: r0 = open(0x0, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xfffefffffffffffd, 0x400000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffe17) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0x204) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/tGv/ppp\x00', 0x202142, 0x0) writev(r6, &(0x7f0000000380), 0x10000000000003cf) socket$inet6(0xa, 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) fcntl$lock(r8, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95, 0x20}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000340)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') fcntl$lock(r10, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') fcntl$lock(r11, 0x6, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="45fde543a87ade762fa9cd7d70df70dbf5d1e84290b67a19195bf3fbf22c07cf803c53f2a32479df8844640d152ca05346520c8737e4a6970b7b020086eeb7ab02dfd3f6a60600000000000000234df975c5adce3938e8dbbfebb75ae9b83695522578e5f768c7510900ed980c3abb5d02761ea8f8a6c9b1c04a643960216b07b3b0d7860c93099a5035800324d4bc6308eae5bc4be5f544ce9fed4105a0db7675d7699ec69cddc388795cf19680755dfd8bf7ba97d3974bd70f0dfa737affd40e6eeb168f5e8bd25af09acfa446bac00e370679b951b5982ce3af013933bab1b6ad93f36bf74536d2d99535967b9ea9e327a1b94f5126bad506b980b1b766c09bcc0c2d6664c567ab2ac97008c0854c780ed28808b3d54bd276c95315105a006e1c4addaf5367246894ac8f958eba37e1c0202dd99314ef875133bd3f8c0a45dc38e6378bb6ec224ace41e3cedcb2bf98ea7c6df612f38c8284c52bc2f7a9b584646c18c4e7bb33a6fd3d648916d69cdce30dbe38975e9f1bd2bfd4c2fcb664321604b59c98d99bbc3c3140a87c097e9489f44d719e850f338bd1ac", @ANYRESHEX, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESDEC=r11, @ANYRESDEC=r1, @ANYRES16, @ANYRES16, @ANYBLOB="9e1b03ccd43e8735bf36cb72467112262cd9d80c04e4c6f7e70bc41098e9177bfe4d20235f006c766da6609cc4234292c8772655666c1b47c1c1952a7e31ddca23003d", @ANYRES16=r10, @ANYBLOB="18e200515411c9b98bbb348283650267d514334da60229f86738259356341e7f57b1f2d35d82b7917cef0d96e519aaa453cb5fcda611878752759cce8eeb0fc565d1d56c0b7ba9700f92fd3b973d56bc7492343941b1a7152581cc17cfa49f84e85cd1b476f0990f8877e688af5f815f385127c65dd553dc758f26ea05c0463579e3b4279796501c8ba6eea1ac4542fa2cdb33312a99bd6ee23c7f10cfe90da7d59d5fc04424273ccd132daabe090ada4646aa33dafb208b590048af", @ANYRES64], @ANYRESDEC, @ANYRESHEX], 0x1dc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 21:35:51 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x183) connect(r0, &(0x7f0000000240)=@un=@file={0x0, './file0\x00'}, 0x80) accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000000c0)=0x24, 0x80000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x81, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) sync() symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') 21:35:51 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 519.713777] audit_printk_skb: 6 callbacks suppressed 21:35:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000600)=""/13, 0xccacf294) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000c00)="b6", 0xfffffffffffffce2, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 519.744162] audit: type=1400 audit(1573508151.752:801): avc: denied { create } for pid=17831 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x480040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) socketpair(0x4, 0x800, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'rr\x00', 0x10, 0x6, 0x2a}, 0x2c) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x5a, 0x0, 0x3aa}}], 0x80002ce, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) socket$inet(0x2, 0x7140ebd332ff7f5e, 0x7) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$dupfd(r8, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) pause() prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f00000017c0), 0x3a8, 0x7a) 21:35:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fgetxattr(r0, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000000)=""/33, 0x21) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='/usr/sbin/cupsd\x00', 0x10, 0x2) 21:35:52 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x9c8f40925f475b71, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) write$P9_RSETATTR(r2, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) [ 520.253774] audit: type=1400 audit(1573508152.292:802): avc: denied { create } for pid=17824 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:52 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000000)=0x7ff, 0x4) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) sync_file_range(0xffffffffffffffff, 0x1, 0x875f, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r2, 0x0, 0x9a}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'sha512-avx2\x00'}}, 0x0, &(0x7f0000000380)="2e63ea1fe32d23fd9574dfca44026127163311eee5b90de9ec1a0fa8be2604d2696a13b08535dc9f6d55b40c3709ba8495606d79afcc4df418db20c57f941a335e374530f4fd21ef5893bf7c2031c9e0d302c0bae295a949308a7654d7961799282af03017745beafb0546bdafa07e22d67719fc69293c14d5ee08cf19aa21a1a5b63c36797e76c8f59c547bc47234045ffebb9540c16b062eb3") gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008913, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$KDDISABIO(r4, 0x4b37) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="62ff00"/15], &(0x7f0000000140)='\x00', 0x1, 0x3) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$notify(r5, 0x402, 0x20) ftruncate(r6, 0x8200) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) keyctl$invalidate(0x15, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r6, 0x81ff) syz_genetlink_get_family_id$tipc(0x0) socket$nl_route(0x10, 0x3, 0x0) 21:35:52 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:52 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)]) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="00d3bb0f00000014660f34ea"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40020000000c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) r1 = socket(0x80000000000000a, 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r2) r3 = socket(0x80000000000000a, 0x2, 0x0) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r4) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000200)=[r2, r4, r5]) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:35:52 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 520.632038] audit: type=1400 audit(1573508152.672:803): avc: denied { create } for pid=17875 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:52 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)]) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="00d3bb0f00000014660f34ea"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40020000000c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) r1 = socket(0x80000000000000a, 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r2) r3 = socket(0x80000000000000a, 0x2, 0x0) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r4) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000200)=[r2, r4, r5]) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 520.847213] audit: type=1400 audit(1573508152.882:804): avc: denied { create } for pid=17879 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:52 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7ffc) fchdir(r0) socketpair(0x2, 0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x13) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000480)={0x8, "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", 0x1000}, 0x1006) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(0x0, 0x0, &(0x7f0000000600), 0xe2, 0xfffffffffffffffb) keyctl$read(0xb, r3, &(0x7f0000000740)=""/141, 0x8d) write$apparmor_current(r2, &(0x7f00000004c0)=@profile={'stack ', 'cifs.idmap\x00'}, 0x11) mknodat(r2, &(0x7f0000000440)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @timestamp, @window={0x3, 0x4, 0x9}, @mss={0x2, 0x420}, @sack_perm, @timestamp, @timestamp], 0x7) r6 = dup(r4) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000100)=ANY=[], 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000300)={@dev, @remote, 0x0}, &(0x7f00000014c0)=0xc) bind(r6, &(0x7f0000001500)=@ll={0x11, 0x1, r7, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getcwd(&(0x7f0000000380)=""/190, 0xbe) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) ioctl$TCGETS(r10, 0x5401, &(0x7f0000000140)) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 21:35:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) dup3(r1, r0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x8c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x10}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x0, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="66e329c7949daacfcde122b5862fe9b0"}]}, 0xffffffffffffff75}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2570a08741256873}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x5c}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$setpipe(r2, 0x407, 0x4d) 21:35:53 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000000)=0x7ff, 0x4) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) sync_file_range(0xffffffffffffffff, 0x1, 0x875f, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r2, 0x0, 0x9a}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'sha512-avx2\x00'}}, 0x0, &(0x7f0000000380)="2e63ea1fe32d23fd9574dfca44026127163311eee5b90de9ec1a0fa8be2604d2696a13b08535dc9f6d55b40c3709ba8495606d79afcc4df418db20c57f941a335e374530f4fd21ef5893bf7c2031c9e0d302c0bae295a949308a7654d7961799282af03017745beafb0546bdafa07e22d67719fc69293c14d5ee08cf19aa21a1a5b63c36797e76c8f59c547bc47234045ffebb9540c16b062eb3") gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008913, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$KDDISABIO(r4, 0x4b37) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="62ff00"/15], &(0x7f0000000140)='\x00', 0x1, 0x3) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$notify(r5, 0x402, 0x20) ftruncate(r6, 0x8200) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) keyctl$invalidate(0x15, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r6, 0x81ff) syz_genetlink_get_family_id$tipc(0x0) socket$nl_route(0x10, 0x3, 0x0) 21:35:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 521.244328] audit: type=1400 audit(1573508153.282:805): avc: denied { create } for pid=17928 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:53 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 521.471818] audit: type=1400 audit(1573508153.512:806): avc: denied { create } for pid=17931 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 521.607601] audit: type=1400 audit(1573508153.642:807): avc: denied { create } for pid=17936 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 521.743937] audit: type=1400 audit(1573508153.782:808): avc: denied { create } for pid=17934 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:53 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x2) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000100)) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000200)=0x1880, 0x4) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) fcntl$lock(r6, 0x5, &(0x7f00000001c0)={0x0, 0x1, 0x45, 0x100000001, r7}) [ 521.888730] audit: type=1400 audit(1573508153.922:809): avc: denied { create } for pid=17931 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000006c0)={r6, r7}, 0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000000000000000000000004e24ffc14e210101020080b000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) socket(0x80000000000000a, 0x2, 0x0) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r8) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, r7, r8}, 0xc) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3}]) fallocate(r2, 0x4000000000000010, 0x0, 0x7fff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r13, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 21:35:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8844}, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r2) r3 = fcntl$dupfd(r2, 0xff9c74c6c8cdb744, r1) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) pipe(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) futimesat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0)='NET_DM\x00') r9 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r9}) sendmsg$NET_DM_CMD_STOP(r9, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r8, 0x300, 0x0, 0x20000, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4048801) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x300, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0xb89cb8543a133cb8) syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000400), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r10 = syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4280}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xfffffffffffffe59, r10, 0x200, 0x70bd39, 0x25dfdbf4, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x20048400) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xfffffffffffffebd) 21:35:54 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 522.431891] audit: type=1400 audit(1573508154.472:810): avc: denied { create } for pid=17973 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:54 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r5 = creat(0x0, 0x0) r6 = creat(&(0x7f0000000840)='./file1\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x0, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = getegid() fcntl$getflags(r3, 0x401) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) fsync(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) r10 = getuid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r13, &(0x7f00000001c0), 0xfffffef3) r14 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) setsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000006c0)={r14, r15}, 0xc) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000000000000000000000004e24ffc14e210101020080b000000000", @ANYRES32=0x0, @ANYRES32=r15, @ANYBLOB="ffffffff4f000000400103006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a8070000064d63a690f12f5c4578fbe90c614a204dab8a0ecd3983cc109492a021b47835b923377517db10373472e53fe8979dd1b76158ccd36ed115711a9c0e2b4cd07fb1babf080f253802f7f66d4487628343fea938f9178096fcf0cfdf716de5cee477c1a6289bddfcd829fb05df0da28ffd2121d6cbc127f8ce0f2df074ab897ad4d79d4d2108a7bc0700eee1cb18b3ac3b9f67c936d0ee732655bf1bfd71cb2384f4351c895aa678993b6c14b1ceee09094f603d679257a29daa0142ff7ef239a35bb6bce35d33d04f1dac7986eee2640a87a2b49aa2cca8f9985974b824ee3ee9dd5cea9bce59292a3e06f3d9e8af8b070d522c000000"], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) r16 = geteuid() r17 = socket(0x80000000000000a, 0x2, 0x0) fstat(r17, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r18) r19 = socket(0x80000000000000a, 0x2, 0x0) fstat(r19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r20) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x5}, [{0x2, 0xa89e45a3dd89fcfd, r9}, {0x2, 0x7, r10}, {0x2, 0x3, r11}, {0x2, 0x1, r15}, {0x2, 0x0, r16}], {0x4, 0x7}, [{0x8, 0x9, r7}, {0x8, 0x4, r7}, {0x8, 0x7, r7}, {0x8, 0x0, r18}, {0x8, 0x0, r20}], {0x10, 0x3}, {0x20, 0x6}}, 0x74, 0x0) r21 = dup2(r8, r8) setsockopt$inet_int(r21, 0x0, 0x32, &(0x7f00000001c0)=0x1000000, 0x4) 21:35:55 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:55 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'bridge0\x00', 0x100}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = getpgrp(0x0) setpgid(r1, r2) inotify_init1(0x5832138208a97eef) sched_getaffinity(r2, 0x8, &(0x7f00000000c0)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) r5 = eventfd(0x3) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) write$selinux_user(r4, &(0x7f0000000140)={'system_u:object_r:inetd_var_run_t:s0', 0x20, 'root\x00'}, 0x2a) r6 = getpgrp(r1) wait4(r6, 0x0, 0x2000000a, &(0x7f0000000180)) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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") r7 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x4200) fadvise64(r7, 0x175db7d9, 0x40, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x41400, 0x0) ioctl$KDADDIO(r8, 0x4b34, 0x7f) fcntl$addseals(r0, 0x409, 0x7) r9 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='\x00', 0xfffffffffffffffc) keyctl$get_security(0x11, r9, &(0x7f0000000480)=""/76, 0x4c) r10 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x1000) getsockopt$inet6_mreq(r10, 0x29, 0x2c, &(0x7f0000000540)={@remote}, &(0x7f0000000580)=0x14) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000600)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x114, 0x13, 0x400, 0x70bd2d, 0x25dfdbfd, {0x13}, [@generic="de7a4e8ca45f52fa5c848544d458faac2b40cf75abbc5182abe2e3326d4c40b8d40ee5cbe9e40b1c9d5ccd7d858978e4c33856b080b877ab092a182b7610211602247ba1b20d1a919539e536e8809e663f373e8acdf17d9d03671f206f4c0afc97ecf75d5e51513985e20ce04bdc5ecb98e723d222f0870358ec98e75c0bf655b19f4efe6416b24aec1885c142caea29a101709718b7a1222c08d90705cfbfb03664dd15240e3d529a838f3eaf6bf238a9b5b82d32287e82a107a497473c1be879ca188c954587fe56b04aa755ae5b4db20fca8442edb3f0d73aef816f7c5962a32eaff029c14d05d652", @typed={0x8, 0x4c, @pid=r11}, @typed={0xc, 0x6c, @binary="c49df717924d18cd"}]}, 0x114}}, 0xd010) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000002100)='/dev/full\x00', 0x5598fc8f893efb3f, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000002180)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r12, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x30, r13, 0x400, 0x70bd25, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) r14 = accept$inet(r12, &(0x7f0000002280)={0x2, 0x0, @dev}, &(0x7f00000022c0)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000002300)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000002400)=0xe8) 21:35:56 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0xff74, 0x140, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r1 = open(&(0x7f00000008c0)='\x00', 0x7d3beeb4a3686d92, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0x91, 0x0, 0x0, 0x5}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240), 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfe09, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="315f599b", @ANYRES32=r2, @ANYBLOB="23042dbd0000000000000000000000000000000000000000050000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="c8ae4239d0ff951fc3e166b70f7a92f5", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x8000) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000100)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) r6 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r6, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="940000000a18cf44af0106b433595d953fbfb116eb241e745de06729eab0ae08f3a1e288edcd0805fb8db2ad7f5f005c7d734ac0a1f62d04d85d50381fb08202167fd5a40148bbd2ec40be938417f7a14fa74bdf427fdd00be9d1356ef3a8810628173417244f738185c8f6a7b676b02e0694cfc984a4bd3b8c122d40795814b0c97201c09000000dd76b37f53d6ec5af798149c9f06a4835eef6e69dfa6fb7826aa5ea527fa774b4538a3827cd147bad3119f94b50e11c4", @ANYRES64=r7], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r7, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1d9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x6, 0xfffffffffffffffc}, 0xfffffffffffffd16) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0xffffffffffffffe3) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r9, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) socketpair(0x3, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000500), 0xa198) faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600) 21:35:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00', 0x4fff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00'}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x9dcd) r3 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x3c) sendfile(r3, r3, &(0x7f00000000c0), 0xffffffff) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = dup(r3) write$cgroup_type(r4, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r5 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r7 = eventfd2(0x0, 0x1) fstat(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r9, 0x200004) r10 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r13 = eventfd2(0x0, 0x1) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r15, 0x200004) sendfile(r11, r15, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r15, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0100000100000000df25ff020000230000000000000000000001ac14147090bb0000000000000000f4ffffff00a2000000", @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB="b46b6e00000000000c001c00", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d1600", @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000300010000000000"], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x8) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000180)=r12) sendfile(r5, r9, 0x0, 0x0) r16 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r18 = eventfd2(0x0, 0x1) fstat(r18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r20, 0x200004) sendfile(r16, r20, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r20, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x70, 0x15, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r17, r19}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0xf, 0x17}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r22 = eventfd2(0x0, 0x1) fstat(r22, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r24, 0x200004) sendfile(0xffffffffffffffff, r24, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r24, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c010000150400042abd7000fedbdf25ff02000000000000000078b06ae4602a5b716debc7000000000001ac1414bb0000000000000000000000004e21e14016", @ANYRES32=r21, @ANYRES32=r23, @ANYBLOB="b46b6e00000000000c001c00", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f000000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070000206d16000000", @ANYRES32=0x0, @ANYRES32=r23, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000000010000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=@getpolicy={0x1c0, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r6, r8}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4e24, 0x0, 0x4e24, 0xf72, 0x2, 0x20, 0x0, 0x33, r17, r23}, {0x9, 0x10001, 0x0, 0x40, 0x8, 0x200, 0x2, 0x1}, {0x5, 0x0, 0x7f, 0x4}, 0x5, 0x6e6bbd, 0x1, 0x1}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4c24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r8}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x1}, 0x8) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000000)=r6) r25 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r0, r25, 0x0, 0x8000fffffff7) 21:35:56 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 524.327923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 21:35:56 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:56 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 524.887875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 21:35:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0xcba0a) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000002030501ff0080dffdffff270a0600000c00010001380800400a00010c000500003017cd3f0022ff"], 0x2c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={@local, @empty, @remote, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x40000000}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001900f100020007000012020000080000e10c00f41ee400", 0x39}], 0x1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000240)={0x0, 0x39b, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[]}}, 0x5) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0xffffffffffffff61, 0x7}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x1d) ptrace$setopts(0x4200, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r6 = fcntl$dupfd(r5, 0x406, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f0000003540)=""/4097) 21:35:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x208200) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000080)=[0x8000, 0x1]) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x8c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x10}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x0, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="66e329c7949daacfcde122b5862fe9b0"}]}, 0xffffffffffffff75}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r8}, 0xc) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc9c533cfd1455f6c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4020) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r9 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r10 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r10, &(0x7f0000000280)={0x7}, 0x7) fdatasync(r10) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000200)={0x0, r10}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) 21:35:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:57 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) tkill(r1, 0x11) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000040)={0x6, 0x81}) 21:35:57 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x400000000088001) 21:35:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000001c0)=""/4096) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xffffff80, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 525.477602] audit_printk_skb: 63 callbacks suppressed [ 525.523942] audit: type=1400 audit(1573508157.512:832): avc: denied { create } for pid=18088 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:57 executing program 1: r0 = eventfd(0x80000) write$eventfd(r0, &(0x7f0000000000)=0x9, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1c000, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x6cfc43cbcbacffce, &(0x7f0000000080)={0x80000001, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e24, @loopback}}}, 0x108) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x404202, 0x0) sendmmsg(r2, 0xfffffffffffffffe, 0x0, 0x8000) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0xffffffff, 0x40000) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000280)={0x0, r4, 0x2, 0x6, 0xb, 0x7072}) r5 = socket(0x11, 0x800, 0x8) flistxattr(r5, &(0x7f00000002c0)=""/25, 0x19) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xffff, @remote, 0x8}, 0x1c) sendto(r2, &(0x7f0000000340)="5c5528e71a91f067af4d", 0xa, 0x8000, &(0x7f0000000380)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x80) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000400)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000500)=0xe8) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@mcast2, @loopback, @local, 0x5, 0x0, 0xd1, 0xa80, 0xd82, 0x1400284, r7}) fgetxattr(r0, &(0x7f00000005c0)=@known='trusted.syz\x00', &(0x7f0000000600), 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TIOCGISO7816(r9, 0x80285442, &(0x7f0000000640)) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/enforce\x00', 0x800, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r10, &(0x7f00000006c0)='./file0\x00', r8, r11, 0x100) r12 = accept$inet6(0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0)=0x1c) recvfrom(r12, &(0x7f0000000800)=""/119, 0x77, 0x2ff1c16bca142e1a, &(0x7f0000000880)=@llc={0x1a, 0x307, 0x1f, 0x3, 0x3f, 0x44, @remote}, 0x80) getsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000900), &(0x7f0000000940)=0x4) r13 = epoll_create1(0x80000) epoll_pwait(r13, &(0x7f0000000980)=[{}, {}, {}, {}, {}], 0x5, 0x1f, &(0x7f00000009c0)={0x81}, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000a00)={'lapb0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}) openat$full(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/full\x00', 0x80000, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x545659c6) 21:35:57 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) clock_gettime(0x0, &(0x7f00000046c0)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={r3, r4/1000+30000}, 0xfffffda0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r5) r6 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0x9) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x40000008}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe8") ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x9a7fb67b1e7639ba, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x1f3) 21:35:57 executing program 4: socket$inet(0x10, 0x80000, 0x9) 21:35:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r1, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x12, r3, 0x78a4b000) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000480)={{0x1, 0x0, @reserved="595a9ba26b57e2db7887780df2ad2896711500d7ea578e01f6143860f787aefd"}}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/315], 0x34) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) dup3(0xffffffffffffffff, r0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="726177000000000000000000000000000800000036dcf5f8d4f0cc22748edb1ed67f52fa1b9a9023840c6eb3d45a7307a8106d1d835c6e749a579b1ed98ee2ac839dad9595ffffb85d7b30ffa213cb5c92b5c4e8fb7a0802e0e8b64fe34471db43647531c9efd3bfb17dc0f6f2161e5cf7815ee9d2f2a41098c4fe9f321f04b6959b899c0021731044872914000000000000000000000000000000005a1a2ff72fa4f003fd1b9ae142e5e297003069684a2f1df787c3b71b559ba14232d3cdb5f78b82fe7ad4da3ac5a9cdbbf794c23277f1741fce490f590ee4461907bcd96be6a6e7e56420bbd808d1d57a5bf4bb0f440b2541fe4dbf83"], &(0x7f0000000280)=0x9c) 21:35:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:58 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@dev, @in6=@remote}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/ipc\x00') write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYPTR64, @ANYRESHEX=0x0, @ANYRES64]], 0xfd8a) splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0) 21:35:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r4 = socket(0x10, 0x1, 0x3f) setsockopt(r4, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) close(r4) keyctl$link(0x8, r0, r1) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x28080, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='schedstat\x00') fchmodat(r6, &(0x7f00000001c0)='./bus/file0\x00', 0x2) fchdir(r5) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x7) creat(&(0x7f0000000700)='./bus\x00', 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) r8 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_LK(r8, &(0x7f0000000040)={0x28}, 0x28) 21:35:58 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:58 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/198) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000001900)=ANY=[@ANYBLOB="ffd934aa54cdfc17009c5b726f1300400000"], 0x12) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r5}, 0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@loopback, @empty, @ipv4={[], [], @remote}, 0x2, 0x0, 0x6, 0xc00, 0xa72, 0x88, r5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 526.282168] audit: type=1400 audit(1573508158.322:833): avc: denied { create } for pid=18142 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$inet6(0xa, 0x403, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000006c0)="665138d0efbc56f8734235554e917f0bc3767b9e8a6778835afb275f0cefbd38980d8407177860e7cb0c19458011769f0b5cd6e6a87b240a430f0cedfcee183e2d2e1c3c50f45b2622a80b575f915b4a45bbd26c3e426f7491f84668fd08f3a64ebc8c2d0f2627f49f412624f94e30af7018afcddcc53499678f08fc52c245e96e55e26547370929b35ac4b7370801b94490e302ee6fde9ff3366b11c6159c918a9737678bb596b2756e2d0fd13905047b77f4d7dac498c76ffea8ebd9bf1ff37e42a1", 0xffffffffffffff75, 0x40000, 0x0, 0xfffffffffffffe1c) sendmmsg(r0, &(0x7f0000000200), 0x29e, 0xfffffffffffffffc) socketpair(0x18, 0x2, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xc00, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000002c0)=""/208) listen(r0, 0x80) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f00000000c0)=0x78) r2 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000500)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) inotify_init1(0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x500488d0) write(0xffffffffffffffff, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00', 0x3c02}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x2) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r5, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000540)=0x3, 0x4) sendto$inet6(r4, &(0x7f00000000c0), 0x1000000ae, 0x0, 0x0, 0x1f1) 21:35:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$selinux_attr(r4, &(0x7f0000000080)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$RTC_VL_CLR(r7, 0x7014) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) [ 526.622577] audit: type=1400 audit(1573508158.662:834): avc: denied { create } for pid=18169 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 526.672576] audit: type=1400 audit(1573508158.702:835): avc: denied { create } for pid=18169 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:58 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r2, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:35:58 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='attr/keycreate\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffe44, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x399}], 0x5}}], 0x400000000000126, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000580)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x266, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="c80300000000000000ce6c57"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00\xba\x99FH\xf4\a\xaf\x04\x14\xe1\xb8d\xd4@O\xce\xbb\xe4\xdf\xc1\xe9l\x05\x9b\xd5\x1dD\xc7k\x8f\xee\xab\x920\xab\x06\xaf\xb6|&\xb7s>\xac\xebo\xb9\xcd\xfa\xb5N7\x1c!\x9c@ad\xfa\x9d\xffc\xfe\xf5[J\xe9\f\xa9\xc7\xd9e\xc9c\xddI\x94|~\x98\x8c\x14\xfb\x9c1\vu\x13\xd9\xb2\xce\x96\xe9\xdfj\xa5\xec\x19\xd8`.\x91\xdb<\xe9\x195\x81\xb1\xd1\xcbM\xc7VJ5\xb7U\xf6\xc2B\f\x13\x02\x7f\xc3\x99\xbf\xa6\xcc\xaf\xfe\xc88\xb5\xcb\xa2X\xd3\x94\x9d\xe5\xc0\\\x86?\x12 \x0e\xb0\xe8\x11z\xcd\x12Na\xf5\xbc D\x9a#\xe1\xa0h\xcb\x9dkDPp\xc4\xd2\xa7\xbejn\xfb\x03v--\xc5 \xb8\xeaq\x0f\x9a\n\xcb%\x1d\xc2\x82\x9f\x1f\xcd\xc8\x818\xa6\xea\x12\xd7\x1b?\xa0u\xb1z\xb3-\xb7\xc8\xc3\b\x1fI5\xcaxb\x0f\xfa/u\x18\xc6\x06\xa6V\xf0\xa7#5\xaeWPV\xf40x0}) capset(&(0x7f00000003c0)={0x19980330, r4}, &(0x7f00000004c0)={0x5, 0x8, 0x6, 0x1, 0x6, 0x9}) syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00\xba\x99FH\xf4\a\xaf\x04\x14\xe1\xb8d\xd4@O\xce\xbb\xe4\xdf\xc1\xe9l\x05\x9b\xd5\x1dD\xc7k\x8f\xee\xab\x920\xab\x06\xaf\xb6|&\xb7s>\xac\xebo\xb9\xcd\xfa\xb5N7\x1c!\x9c@ad\xfa\x9d\xffc\xfe\xf5[J\xe9\f\xa9\xc7\xd9e\xc9c\xddI\x94|~\x98\x8c\x14\xfb\x9c1\vu\x13\xd9\xb2\xce\x96\xe9\xdfj\xa5\xec\x19\xd8`.\x91\xdb<\xe9\x195\x81\xb1\xd1\xcbM\xc7VJ5\xb7U\xf6\xc2B\f\x13\x02\x7f\xc3\x99\xbf\xa6\xcc\xaf\xfe\xc88\xb5\xcb\xa2X\xd3\x94\x9d\xe5\xc0\\\x86?\x12 \x0e\xb0\xe8\x11z\xcd\x12Na\xf5\xbc D\x9a#\xe1\xa0h\xcb\x9dkDPp\xc4\xd2\xa7\xbejn\xfb\x03v--\xc5 \xb8\xeaq\x0f\x9a\n\xcb%\x1d\xc2\x82\x9f\x1f\xcd\xc8\x818\xa6\xea\x12\xd7\x1b?\xa0u\xb1z\xb3-\xb7\xc8\xc3\b\x1fI5\xcaxb\x0f\xfa/u\x18\xc6\x06\xa6V\xf0\xa7#5\xaeWPV\xf40xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r9, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r11, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r12 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r12, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x200, 0x0) r14 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) ppoll(&(0x7f0000000700)=[{r8, 0x17cc}, {r9, 0x1001}, {r10, 0x310}, {r11, 0x2}, {r12, 0x40}, {r13, 0x12}, {r14, 0x1020}], 0x7, &(0x7f0000000780)={r15, r16+30000000}, &(0x7f00000007c0)={0x80000000000006}, 0x8) ptrace$cont(0x7, r1, 0x0, 0x0) 21:35:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0xedf1d44) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r6, 0x4, 0x40400) write$FUSE_WRITE(r6, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r1, 0x4, 0x6100) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r7, &(0x7f0000007e00), 0x40000000000025d, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+'}, 0x28, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) [ 527.243531] audit: type=1400 audit(1573508159.272:836): avc: denied { create } for pid=18199 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 527.368455] audit: type=1400 audit(1573508159.402:837): avc: denied { create } for pid=18169 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 527.393734] audit: type=1400 audit(1573508159.432:838): avc: denied { create } for pid=18169 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:35:59 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setxattr$security_smack_entry(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='./cgroup.cpu\x00', 0xd, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000040)='./bus\x00', 0x10001, 0xf2) lseek(r1, 0x0, 0x2) sendfile(r1, r1, 0x0, 0x8000fffffffe) writev(r1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) execve(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000880)=[&(0x7f0000000740)='/proc/self/net/pfkey\x00', &(0x7f0000000780)='./cgroup.cpu\x00', &(0x7f00000007c0)='cpuset\x00', &(0x7f0000000800)='trusted^cpuset\x00', &(0x7f0000000840)='/proc/self/net/pfkey\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='./cgroup.cpu\x00']) execveat(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendfile(r1, r4, 0x0, 0xa5cc554) 21:35:59 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x30402, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x17cd, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x79fd, 0x0) fcntl$setlease(r0, 0x400, 0x48d726e701395725) creat(&(0x7f0000000240)='./file0\x00', 0x0) 21:35:59 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:35:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:35:59 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) epoll_create1(0x80000) close(0xffffffffffffffff) socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070fab092500090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc0002", 0xfffffffffffffde8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) ioctl$RTC_IRQP_READ(r7, 0x8008700b, &(0x7f0000000100)) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x1, 0x61, 0x7ff, 0x2c43, 0x5}) 21:36:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='syzkaller1\x00', 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x10070800) keyctl$get_security(0x11, r3, 0x0, 0x0) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'\x06\x00', 0x3}, &(0x7f0000000080), 0x0, r3) r4 = add_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="3ef3ddfce3c56b053043477181b6a1c9f96e14c87b3fd39026a4d20df22f2a0bf11f683dc9e6910693b2474a4b3752b852504c5a0b3ad8977a6719a30c9c808024b518655dd130ece618978565014f01307edccfce6ff81cc12a47a99a91a56c471568ab2530572b428d7e557b6f4d5976b213ea3ca71ae1e29de5c6bbee83f8ea5e94adaad1ef0633b516cf56a48978f04fde4567f9ee22c1326526b78e5ce35d10236d2ae37dfd5f3680ed2549b86177fa29b841648863b34f3160db70a28e9d77a6e7f294365172611da2850d1270af59bfada6ce95b4de8ab43c5466a46bd1338e78f6e107b89e2655c96935e56d7ea7642911502af18a", 0xf9, r3) keyctl$search(0xa, r2, &(0x7f0000000180)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x1}, r4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x3f4f7cc7ee6b529b, &(0x7f0000000000)={0x9b, &(0x7f0000000140)}) clone(0x2088c503, 0x0, 0x0, 0x0, &(0x7f00000001c0)="329117d380804892b12765d00559bfd10d") [ 528.095849] audit: type=1400 audit(1573508160.132:839): avc: denied { create } for pid=18232 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 528.303335] audit: type=1400 audit(1573508160.332:840): avc: denied { create } for pid=18232 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 528.386672] audit: type=1400 audit(1573508160.422:841): avc: denied { create } for pid=18252 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:00 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setxattr$security_smack_entry(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='./cgroup.cpu\x00', 0xd, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000040)='./bus\x00', 0x10001, 0xf2) lseek(r1, 0x0, 0x2) sendfile(r1, r1, 0x0, 0x8000fffffffe) writev(r1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) execve(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000880)=[&(0x7f0000000740)='/proc/self/net/pfkey\x00', &(0x7f0000000780)='./cgroup.cpu\x00', &(0x7f00000007c0)='cpuset\x00', &(0x7f0000000800)='trusted^cpuset\x00', &(0x7f0000000840)='/proc/self/net/pfkey\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='./cgroup.cpu\x00']) execveat(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendfile(r1, r4, 0x0, 0xa5cc554) 21:36:00 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:00 executing program 2: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x437}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, 0x0, 0x37d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110003) lseek(0xffffffffffffffff, 0x0, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd) 21:36:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$setflags(r5, 0x2, 0x2) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x38d}, 0x1a6db1e6) readlinkat(r7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=""/212, 0xd4) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000480)=""/205) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x80c0, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000140)={0x9, 0x401}) 21:36:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syz_open_pts(r1, 0x8902) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) fsync(r1) r2 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x30c, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) 21:36:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3958) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000001300000000000000000000004800", @ANYPTR], 0x0, 0x0, 0x0}) [ 529.306305] binder: 18305:18308 ioctl 40046207 0 returned -13 [ 529.422504] binder: 18309:18313 ioctl 40046207 0 returned -13 21:36:01 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:01 executing program 0: dup(0xffffffffffffffff) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) clone(0x203102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x29) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 21:36:01 executing program 1: socketpair$unix(0x1, 0x1000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x2d2}, 0x0) socket$key(0xf, 0x3, 0x2) preadv(r1, &(0x7f00000017c0), 0x32d, 0x400000000000) [ 529.626498] binder: 18305:18312 ioctl 40046207 0 returned -13 21:36:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x80004507, 0x9) 21:36:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:01 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(r0, &(0x7f0000000280)="a207d9106bc0e65db1ca58fa97db2eeda51d9d8dfd32423f0b99993d1756e7fddd4bc1f662f0794e2129b3b251a44979903a92fe16401f08caf0892cca8b4040a0042a74bf077a28102013b3e87f21cc30596882ab51aec9debaccad4dea1ee4de8982366fb3aa79839bc226816fe7613e480dd61ce2f7ca4ad01d35f6a8", 0x7e) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)=[&(0x7f0000000180)='/dev/ptmx\x00', &(0x7f00000001c0)='/dev/ptmx\x00', &(0x7f0000000240)='em0\x00', 0x0, 0x0]) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = getpgrp(0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000002f80), 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setpgid(r3, r5) ftruncate(r2, 0x280080) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x2c280, 0x0) ioctl$VT_GETMODE(r6, 0x5601, 0x0) sendfile(r1, r2, 0x0, 0x2008004fffffffe) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) openat$cgroup_subtree(r7, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) openat$cgroup_subtree(r8, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-\b\x9e\xc2\xc8\xee\xd1\x03\xfe', 0x4486c0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) getsockopt$inet6_tcp_int(r8, 0x6, 0xc, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$BLKPG(r7, 0x1269, 0x0) 21:36:02 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0xa00, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:36:02 executing program 4: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'dummy0\x00', 0x5}) r1 = socket$inet6(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x384, &(0x7f00000000c0), 0x0, 0x0, 0x82}, 0x40) 21:36:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000200)={0x0, 0x4, 0x3, 0x7, 0x800}) write$P9_RFLUSH(r0, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/access\x00', 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5721faaaa7859568, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0xa, 0x7) r5 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400) poll(&(0x7f0000000180)=[{r0, 0x4}, {r2, 0x2}, {r3, 0x8081}, {r4, 0x100}, {r5, 0x3}], 0x5, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_netfilter(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000000000000c00020008000100c3d3a4bc4d9924bedb74756985dde01d00020000000000000000"], 0x20}}, 0x0) 21:36:02 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_team\x00', 0x1000}) fchdir(r0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) unlink(&(0x7f0000000240)='./file0\x00') ftruncate(r3, 0x208200) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r9 = creat(&(0x7f0000000980)='./file0\x00', 0xa7466697f6acdcac) write$P9_RFLUSH(r9, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r10, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r11, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r12 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r12, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r13 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r13, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r14 = eventfd2(0x200, 0x80000) io_submit(r6, 0x6, &(0x7f0000000900)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x82, r7, &(0x7f0000000340)="7e2f2fae91bd30ece736073367d386e0f71f4e11c7bcdd4465cb39c7e0e461b44425e7daf5316b7155c49ca2cdbab014be512c8354df4039efc3a6bb288045fb209bd217530baa873ae65df969c6929960d522cdccc04144201537e11bcfb6a31fe9afcf0c72cefd96006266d74ec5e9d914a4d0323501ad8d8cb3ff40b6b560612941f9b3253cf49685dd859c6ed21cbb3bc72f4196ca2d5b137cdb3c7bef841baa9992aa267c3dad58858f394686f528ec0ca25183629e90cbaf50dd4976012c2267fc18a7e82e24e92401cadfaa5115f1a624810e5e44c85f", 0xda, 0xffffffff, 0x0, 0x2, r8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x100, 0xffffffffffffffff, &(0x7f0000000440)="3ba65d950fab3dadd12bff0b0bc9a09d8e05685148c4b79d763589988aa19027a260648f8820c1174dea631ed7363382ac6c03ed17c9ed4e308e582c4aa442bf12fb135413e97303a03d02c67e82f1909b35c14aa793effbeb5be15f8a7aed7275a1487a5b13bd85a9464b5040377c96d462b75653bfc7e178ce6646c8398110c2c352ea0ed13e189d7c1bb1726c3e0dec6caddcb02f", 0x96, 0x9e, 0x0, 0x0, r9}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x8001, r10, &(0x7f0000000540)="bc24f0e6467499f852333f1dda74f07e989f8b96db7a461d045e2be10469c78cae1154af9ddb076de3898f7c2d32bdaed25da90377b8f8999ccc220ca4237ef1fab7df47b7aa6022177d01432905409099bc88deb4367d1d01dd8975ff7a8501356a0acb433b8460adc2b272b374ff868226bbc86da2974a314a62492ffd4e9d66a40b1eae34509f6808b603c33cb46c0a5e2ab619950a7ad4bbce656fb80bfa6314d8adf9f5eb999aa3a0c5d101d9e6583569c391ec392adbd8", 0xba, 0x8000}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x8, r11, &(0x7f0000000640)="aa616a1497600ab0ed1ff527370b46216896c43847995c650c5133bc916783c8d09df918f1da8ca8e4608277d9cf249a37339a1de13535205306073ce74015ff18046bc496fd4ad60716f24e8f8368a38cfcd393e7e891cc989473e3ef175dea8a5921a2839d5cf9d4c005b05216c1fe5801307665559deec2f170ebebf5b7278c522e20e4ca7257a038ab32cd6a174f041197edcbaf9d0876ab", 0x9a, 0xfffffffffffffff9, 0x0, 0x2, r12}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0xfe0d, r13, &(0x7f0000000740)="0caa9bc91eafcff0d06d85c6b451dea0e68fc31ea8a809f2ea726ee07746c0a76fb29d66a0c04d52acaa3b411504149541d82bfd77f13e006cdfdc4776243b45de3ceea8e1d9aca562f8e7ffdb68a2209cf1c6f6a2b98e9169872ee3852a1ecf1442648438", 0x65, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000800)="b7b6b200efcf700fe6b7d9f12a3ef381577193a2b325e94a861c766abedd77dc8d2da3f65932057cabb8074ee24ee2dbf04e4fc85d2cbcac70e32d7abdc3d52febd55efc65a6d2592a13a84c0f4f7d501e6b0824700fbac016c8b737ad9c7ee4b0e5b2a79daa60c33d4d002207d1692976eba1e059e0d740ae3887fd7d921c9a5592bfff5762950212470d54a00db4139def3bee8ab498e9f09c00669868b0316049bed6fcc1292b93481656e9f4d7e2", 0xb0, 0x1, 0x0, 0x0, r14}]) r15 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setstatus(r15, 0x4, 0x6100) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = fcntl$dupfd(r16, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) r18 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r15, r18, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x1, 0x85, 0x9}) 21:36:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/896], 0x37c) write(r0, &(0x7f00000001c0), 0xfffffef3) fcntl$setstatus(r0, 0x4, 0x2800) 21:36:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x24020400) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$packet_buf(r1, 0x107, 0xb, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00\x00\x00\x00\x00\x00\x00\x00\b', &(0x7f00000010c0)=ANY=[@ANYRESOCT=r1]}) 21:36:03 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:03 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000040)={'caif0\x00', {0x2, 0x4e24, @multicast2}}) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r8}, 0xc) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@ipv4={[], [], @empty}, 0x0}, &(0x7f0000000240)=0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r10, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000480)=0xe8) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r14}, 0xc) r15 = socket$inet_tcp(0x2, 0x1, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r15, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r17}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'lo\x00', r17}) r19 = socket$inet_tcp(0x2, 0x1, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r19, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r21}, 0xc) r22 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r22, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$ifreq_SIOCGIFINDEX_team(r22, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001e80)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000007c0)=0xe8) r25 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r25, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$inet_mreqn(r25, 0x0, 0x24, &(0x7f0000000800)={@empty, @dev, 0x0}, &(0x7f0000000840)=0xc) r27 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r27, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) accept$packet(r27, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0xb2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) accept$packet(r4, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) recvmmsg(r2, &(0x7f00000068c0)=[{{&(0x7f0000000a80)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b00)=""/232, 0xe8}, {&(0x7f0000000c00)=""/56, 0x38}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x4, &(0x7f0000001d00)=""/234, 0xea}, 0x7}, {{&(0x7f0000001e00)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000007200)=""/227, 0xffffffffffffff7a}, {&(0x7f0000001f80)=""/156, 0x9c}], 0x2, &(0x7f0000002080)=""/190, 0xbe}, 0x8}, {{&(0x7f0000002140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/79, 0x4f}, {&(0x7f0000000280)=""/90, 0x5a}], 0x2, &(0x7f0000002300)=""/219, 0xdb}, 0x3f}, {{&(0x7f0000002400)=@can={0x1d, 0x0}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002480)=""/81, 0xffffffffffffff3c}, {&(0x7f0000002500)=""/224, 0xe0}, {&(0x7f0000002600)=""/135, 0x87}], 0x3, &(0x7f0000002700)=""/154, 0x9a}, 0xff8000}, {{&(0x7f00000027c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002840)=""/116, 0x74}, {&(0x7f00000028c0)=""/122, 0x7a}], 0x2, &(0x7f0000002980)=""/181, 0xb5}, 0xff}, {{&(0x7f0000002a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/157, 0x9d}], 0x2, &(0x7f0000003bc0)=""/196, 0xc4}, 0x7ff}, {{&(0x7f0000003cc0)=@xdp, 0x80, &(0x7f0000006280)=[{&(0x7f0000003d40)=""/171, 0xab}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/156, 0x9c}, {&(0x7f0000004ec0)=""/192, 0xc0}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/79, 0x4f}, {&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/179, 0xb3}, {&(0x7f0000006140)=""/90, 0x5a}, {&(0x7f00000061c0)=""/168, 0xa8}], 0xa}, 0x6}, {{&(0x7f0000006340)=@isdn, 0x80, &(0x7f0000006440)=[{&(0x7f00000063c0)=""/123, 0x7b}], 0x1}, 0x20}, {{&(0x7f0000006480)=@rc, 0x80, &(0x7f0000006680)=[{&(0x7f0000006500)=""/32, 0x20}, {&(0x7f0000006540)=""/96, 0x60}, {&(0x7f00000065c0)=""/173, 0xad}], 0x3}, 0x1}, {{&(0x7f00000066c0)=@ax25={{}, [@netrom, @netrom, @bcast, @rose, @remote, @default, @null]}, 0x80, &(0x7f0000006840)=[{&(0x7f0000006740)=""/235, 0xeb}], 0x1, &(0x7f0000006880)=""/31, 0x1f}, 0x5}], 0xa, 0x10080, &(0x7f0000006b40)={0x0, 0x1c9c380}) r32 = socket$inet_tcp(0x2, 0x1, 0x0) r33 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r33, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r33, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r32, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r34}, 0xc) r35 = socket$inet_tcp(0x2, 0x1, 0x0) r36 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r36, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r36, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r35, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r37}, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000071c0)={&(0x7f0000000100), 0xc, &(0x7f0000007180)={&(0x7f0000007300)=ANY=[@ANYBLOB="9f2fee9f", @ANYRES16=r5, @ANYBLOB="00012bbd7000fedbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="0402020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004005b2c00003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003400040008002004c9000000824840dc080000000500080203000000050002010800000001006cff110000000800777fffff000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040007000000381001410000000000000073745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040000000100080001006065e7b8eac0299b6d9c0e2de4ff55b6469f9cf2e098fc414fa88699c241b994b73cc276e0c977dea3357f46382edaf003db39233b4a1ee6e6e0394c29c3e0dc0e5c164066dd4a872d20a4b9c4322dd604c7f2d506a9b526d6a2d678ea98e4270400ab32eb63dcbdd0ecef3be03b8c01f93cdef0be7cc21de809bb3887a5dd0c88700a5d", @ANYRES32=r21, @ANYBLOB="740002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000408000100", @ANYRES32=r24, @ANYBLOB="b80102004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040009000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000001000008000600", @ANYRES32=r26, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400f8ffffff08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r30, @ANYBLOB="8401020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004007f00000008000600", @ANYRES32=r31, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r34, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r37], 0x5e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 21:36:03 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 21:36:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 21:36:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) shutdown(r0, 0x1) [ 531.873232] audit_printk_skb: 39 callbacks suppressed [ 531.878808] audit: type=1400 audit(1573508163.912:855): avc: denied { create } for pid=18414 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) [ 531.993543] audit: type=1400 audit(1573508164.032:856): avc: denied { create } for pid=18420 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:04 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 21:36:04 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x1a7) mount(0x0, 0x0, 0x0, 0x0, 0x0) [ 532.440872] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.447582] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.542825] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.565809] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 21:36:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, 0x0, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 532.595528] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.641605] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.665920] audit: type=1400 audit(1573508164.702:857): avc: denied { create } for pid=18414 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:04 executing program 1: clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102009ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002dd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) link(0x0, 0x0) [ 532.728771] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.799630] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.840971] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.876290] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.918885] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 532.951488] audit: type=1400 audit(1573508164.992:858): avc: denied { create } for pid=18460 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 533.010274] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 21:36:05 executing program 0: 21:36:05 executing program 0: 21:36:05 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0x0, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:05 executing program 1: 21:36:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, 0x0, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:05 executing program 4: 21:36:05 executing program 2: 21:36:05 executing program 0: 21:36:05 executing program 1: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000256000/0x3000)=nil, 0x3000, 0x0) 21:36:05 executing program 0: 21:36:05 executing program 1: 21:36:05 executing program 4: 21:36:05 executing program 2: 21:36:05 executing program 0: [ 533.933386] audit: type=1400 audit(1573508165.972:859): avc: denied { create } for pid=18491 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:06 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0x0, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:06 executing program 2: 21:36:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, 0x0, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:06 executing program 1: 21:36:06 executing program 0: 21:36:06 executing program 4: 21:36:06 executing program 2: 21:36:06 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0x0, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:06 executing program 1: 21:36:06 executing program 0: 21:36:06 executing program 4: 21:36:06 executing program 2: 21:36:06 executing program 0: 21:36:06 executing program 1: [ 534.802769] audit: type=1400 audit(1573508166.842:860): avc: denied { create } for pid=18540 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:07 executing program 4: 21:36:07 executing program 2: 21:36:07 executing program 1: 21:36:07 executing program 0: 21:36:07 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:07 executing program 1: 21:36:07 executing program 2: 21:36:07 executing program 0: 21:36:07 executing program 4: 21:36:07 executing program 0: 21:36:07 executing program 1: [ 535.627038] audit: type=1400 audit(1573508167.662:861): avc: denied { create } for pid=18569 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:08 executing program 2: 21:36:08 executing program 0: 21:36:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x100000000000002) 21:36:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199159dff5112fbcce9a6981a14a3e260c650b5edacdec6fdb69d5a415918be", 0x2f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 21:36:08 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0xf) r2 = dup3(r1, r0, 0x0) write$P9_RLOCK(r2, 0x0, 0x0) 21:36:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/icmp\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x3}) sendfile(r3, r1, 0x0, 0x6f0a77bd) 21:36:08 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RCREATE(r3, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x48, 0x3, 0x2}, 0xd41}}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'bond_slave_0\x00', 0x400}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) getsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000200), &(0x7f0000000280)=0x4) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f00000001c0)={0x12, 0x26, 0xe, 0x14, 0x4, 0x6, 0x4, 0x6}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x8001) close(r0) [ 536.543903] audit: type=1400 audit(1573508168.572:862): avc: denied { create } for pid=18602 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f0000000000)) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 21:36:09 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$int_out(r1, 0x2, &(0x7f0000000140)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r5 = creat(0x0, 0x0) r6 = creat(&(0x7f0000000840)='./file1\x00', 0x48b27f7e733975aa) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000240)={0xf736, 0x0, 0x0, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000}) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = getegid() r8 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="2400fcce08387b9cb09af6ebf16a9ea077c70b47368c6f4f04f812f0c123d27ffbf0cadb74752eef088f07ff1d09ce5262c3f6b5c110acb60a562efbf2355af1b3912bc2568ccf5705b3816ab94af8aae7586f7397741343a0163a2ad27c17afae71dc21dd5a612443ce2b9822cf1293588a709e9271abe57d2dfaf66949a1047937a57d2e5b831b57a0e7637f03b2c12f24dd6a4a5164d865b1a9cbc0e6ba687a7ba24248f058519365620dbcada24e391f21968879921a1e2eb04047ec56c8d76ed94c445e0f", @ANYBLOB="23042db0000000000000000000000000dcb34b53fd45dfd9ee4401bc000000000000000500"], 0x2}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c8ae0400f9fa423afe7556c7ee8e8afc2655d42af0fbd6ea", @ANYRES16=r9], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r6) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r10, r10) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x80087601, &(0x7f0000000100)) 21:36:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000580)) socket$inet6(0xa, 0x4, 0x3f) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0xfffffffffffffcbc, 0x8000000000000200) r2 = memfd_create(&(0x7f00000009c0)='cpuset\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r3 = gettid() tkill(r3, 0x1000000000013) [ 537.392986] audit: type=1400 audit(1573508169.432:863): avc: denied { create } for pid=18655 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 537.598278] audit: type=1400 audit(1573508169.632:864): avc: denied { create } for pid=18660 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 537.685395] audit: type=1400 audit(1573508169.722:865): avc: denied { create } for pid=18660 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:09 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x91, 0x0, 0x0, 0x5}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000240), 0x2008000fffffffe) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, 0x0}, 0x20000004) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x8000) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x4fe385d0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x130) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$binfmt_elf32(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"/1300], 0x514) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) setxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x1c3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080), 0x10) sendto$inet6(r6, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008000a000c00060000001940a30700000000000000001338d52f4400009bfb83de448daa7227c43ac9220000010cec4fab91d400000000", 0x55}], 0x1}, 0x0) sendmmsg(r6, &(0x7f0000002980)=[{{&(0x7f0000000480)=@ethernet={0x306, @dev={[], 0x26}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="45cdd8e6f64e78f145538ebdd8a9ec8e5c56ce8883d2bc4c8249325962276c7a86ae2a915a8d643f3e7885e0c0e2d16a3485eb06bdb6276146efa847eab88979836e46429c78904603882e75ca5aa677746e22e6aab92ac309d0a640e2b64f7b9da05d948020e6d6a4f3cb5d31400fdec02b56da32abc886a115707d6dea2e7af3a753f0", 0x84}], 0x1, &(0x7f0000000500)=[{0x10, 0x113, 0x7}], 0x10}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="473702c96e7c4708c1c3", 0xa}, {&(0x7f0000000680)="65c3b66018ac02d5a74ca79a79c10cf813acb16d11d2e6f96c217fe084ee731f3fa5b7748630b63e1f1757befed65d5588e8ea3865f23867b01a76a645abea2ac181d107529de06807ca23e6e4bc0af056e12c8b07e77e0c65d6ec2752d0a8b47a1c572ef42365e37a627bbf101889ba97519f1db24591a5d252d1a38f5628989d5a97ab9281dc50766dbda3c4769f2c5bab3c79fa4c63717ab3c69995ab867cc5d12380a2f54e3c19159f8d3761cbd14a980c2b0e0cfe6255261b2a63", 0xbd}], 0x2}}, {{&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @loopback}, 0x21, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000900)="7b6aa7a93e9a6ca089d983fcf7e73acb8c9041a2050da19d9d3d4b90acfdcd99a862ffaecac4e1f762d2d98b84cb873f46b0335dc744a463c3743155a70a1d8937", 0x41}, {&(0x7f0000000980)="e8ab33efe27d577fd2bf1a7889158e7536978ffabe6d9dfa9d53e4ebc438796ab81265d61d9e3581b14aef5f829e7bd8849e418f9e80ee233ed9dbb806e444367201982dffca35e8852221ffc4bfebd8ade4e5c531fdb036fb71faf125d5352c7575b862259bb0b07b1d43a5ca6a40bb1aab92268520095b48b8e8ed86da03c1649b8800c8504f653f9d3b99e45a1047c11fc38a517f9ccad60c41b578803184d7d316c4a9377b9db6ecc851d3b2b7f45de14c5525", 0xb5}, {&(0x7f0000003000)="06cee0c135a61618daa6aa09908ff80e0af4e14bc5eab0e945b72bb2a31208f8c6528eb23ffbb2274cbe3764a66de38c72624c483749c0942eeaaab89c559d37bcc4db65ff71060d90730d2b05d9e4afc29138977ddf5947c51875ea80c7002827ecc57448966989c965a1d732c0370c77e45ca5af947a36cf7bc8c5efc9a10b29fdf289d843aa74ec3150afa07067e8906059bb3cf457637618b90db32f8073079c7ae0fd9a1d406095ce1d2b233618e715e7a037d0bf60edf747bfb5c27b19b84641298a86743111fcd81e2d6d9e15c01ea40f405783b73c80f3b6f5ecb532e0a119fbaafce3cbdf12bfe03c9611419c29dde545cfa9ca22316bc1572b14cb1323aa6b164952e450091ec54f715c5c3bb9947a56e02c93ddacc92bac86dd342720936e8326b58133dec356c0b0106b4ded6eb8153b4fb481c4e526adeac1a9e84aaf51d59a4c147b43d0291e7c9c894613c5fb90118df69138bdad7bccf9210794d3b401258897e231b8ffc303c3f80f62b7520589386e966a023f147e51e30a447e0408ae4244fab1722b98c95525d7b03c383a0ca172b990941323d2c60ef2adea91c193aa3f0ea9089b8a0baf5333211504f58c1053d8ef908d8bc81dd46ccb01abd9b03a777253cd645eeb432c63a8a5c3c7055ff9cf538c769f1b90ddef9cd6aaf4848ef6b9d4adf3812ad53a5502a0ddba95d491afc4d8f0deedcd0cb2971a03bb7afb1e40db94905c07db90e956c975d557046c90e32fa4e558cca41423a71a555aa2912e65ad927bfbeb1dd263ba78c9936e76a0f66814d65d7ae7788fa2e63947c0268798898e5e28877796b09c83038c8fa9f6c898f622093ca25727d4faa1a629689c3b424e3d73da0415e9df989eb20ece4e0de35c11ccfb8a4b9e14f74db7b1842dcecea8acf80ac445568cb54ec842712fa4690e80350011eab2163ca9411a31e5c6bb9aed088288a02a4568701bdb6f58849388638b33d63ff9965d9a5f15d9b97ac7c24ec2d595b9c871b04053e60af23b19bc2efff66c2a55317e0772794b2a1f032ce70603203e4857139f4ce8040e72e26123019edcd7cfe29e78d7d635267ee103131506b4229a3752d37adae915879a4952d82094d62a8053fc4a88166969015c11846e8cc2b933e872d811de11221ca27f312eccbfeb5e6474ad5f4d895fd7a4abe79f17115674e7b5e212e258f259e0b972f49b9a401bb2cc5571e0b2148de8677e66775ceca22bdbce3907156667efd41ba80224a95862bf543442ac1264a40c22374978b9572a339c6b334913f47c926ea1f20ef5a861509addbeb400ce878a1cbe4725afaea74e3737ab6aa3743666e6298a1d74df468df8b2bda11083578c27844338f74b9ce7d2cdac43bbb9db419fa5dfd937cd7a5f8397e1bb6566b1868325ce1d668d6b8ba8e432dcbf3327ffad14f6ce28d919a7498bf7ae160e6d6cd255d1feecd3d82a882bae25b70c6dcc31e97280244611020ef24d3ce3ebf9359605843c7cee48585b43576af5e0a177a1615e299964276c00cfcab3be159dcd546c83ce5fc919fa493e0e11614fb59278f451ae2c592f62b10152bdec83b6e89503ddf263b6f10ad1c201c3e1b8724033227a9b0407f7857e5f686dc2f9e2ebc0387b65df2121f62dcbd43914263a018609afd81b9f9071f3c3f3cbd3a153a51ae538a2ab78abeee044d3864df6f091c7bf166ff9aa504d789fd3e7acf1b1aa41eb3f73fc0c7df99bc601ca846d952387b1cfe14def99549857fb7a126466d34b63eb3665ec1b42a2f4c6862474e6e687940f8034a337ada5dacaf99759202f8136b52113904a3482b9e47c429f71f8a0a994cb954a6e373f62e429ec795a2fa1c6a23af1d58664e918e58855a019f92b032fd96efbf5bad2a76d776d22c7a77bc2a0a781ac03735504dd3d9620389f6b314353b0fd41f1d07f658df36563ca992d17ece67e2caa3d9a17d95836d58e092ada0772b7b23c92e82c6ac53ec9f7afc0e433ceec79d0975c718b89657814198cf767c44396ce557b543410b9d221a09e1b054c03557383d61be625b45bc599b58078be5e44015fc0f7e714355d6ef73f1c021125861f877fb53a4e9cc6cc534310e9cb5fccd22ddd73142e2979b75ad02a8838772236c0cca00e6f8ef7d4753d72e0dec73db62061a9c654acfe03a5cebabf2edbf26ee450446d6dcebf07590b5329005a1d42e7405af4ff992b987ce3e18c1631314005eba5a0e2c7bafad5809fd9086b3409fccad44bee06269c1ef9209667da869e9e05832caa942274bc7290c8819a544dff4cb2f44b038d0bf43d3030278828ca1c7fa41c99603195b40bae3b32f7803b9d8ad6fac5526b6b948d6757f5bb0f0d80ea52224a66b66a590eea7e98f659799f621030a12732cd809d5b5730dd3de00d648cb684c64c4b16f24c475e7c650675d6940869db9cf1c976a7e42fb06816c46184d9a08676919071da210908ab047ef0ec773331878705cfa9ef0bed56f99d0217883b692a00c10aa94528c9e915f9b39774b0c23311b9ade01d5889b51dfbf3e8f6bd453dc6c3bc3eb36a7e296a0eb838f15f1f7900f2997f4f367e53b909e90bdf6294bdb34a4cc42f7baf85ca980066b804489b065ec1b605c623aed7fdc350f9bfd5edad312e7a553a9f872b7968fe1b85cac4a3aa7193a359cbcfd706e3c8f594bdfc2db48908c57a95bf672c01a89096f490d25b56469f11b95b6a5382132c9ade4b976fc367d552eb75e2b4ee61bf44120e312df9b56b2a9b6aae7e7da0a650d9c79dfec3f10b5572ce0e5f72f2801be891e5782ddf32c58b26a3a08cafed3e3f6aa51ba37e1a9be1edfbfef1cb4a17697e265275a5a90d83d94361f07b76dcac45a114fd366d33a2bbac75f23727410d8bcb9edc0ff5497d3d6dec149abd280c88ccc63a269f7c9d8b15def2dbfc2c1ab33405e0bf4fd9f09db1eac3f2868d25eccd4403824aaf025080977cfd3a08db4c188475d4fda69de64597380fd646fb1d1044d1a194cd04dacf38a689a5a5bed9937cebeda8302c0d6c7cbdd66cea45d21daffd9b93fd770db71761d8c88ec055781196151ff6acd6c553d2a18b5851ef6553fb2f4e0b46c2583427cd0232c17b6a918f5acfafd88a14e7381a0b546686caa3bdc136057fe96afb3172eba9dee5bbdb2ef418947d3cea8e038e8ce04c7d45f02669112a46c6c32e7786743fa9abfe3282fa73d5abef6de5501316b0cdd4d7343cf33d9f66fc78a671201c9e0e79c53f6f54674a7182c81102a8bbed8e59a1beeb236e72ae84b243801d0398c4fd51436e1e5550e4b4507662cc7b83a3ac44a6df01c95885f51ca1d73b25b815adf19dedf28e3705fcee83ae0438a333dc0d222dbafdc68fb3dff92eadc0997a0cd7bd24effa1e8221d5c2209d46eae3849d4fba9f57275a961c24b5af358c6346c5b72e4dd111513017a022403a5d4b73a0c4d5c591cf7b776ec5b98aa5d4f3574e260a00f672ba1dc01b85218cd7206ead980be4946e3704037de653a0d6180a313b37611b02d556ef4ec32606a8a50b9945e3f46fae54e569ec37942580711fd89b37c67acb86b01a4641a421538b411ac29a584c5f4b8da35b47105828beff01d0eaa71ed90a157af5461771f665ac7889307aa9d9187fe23b0382c4a47f73d1cf9d1ee8fa9852253ff36d5b42036a19f5c188b9363de0b24142ace4e501cafeba4c880e4c31c8560d1c4d17d1fdb6c1eed35a2530f3b172e0bad546462ffe7be93223037a04fc9ff493ecd5cc2246d311e4c46b98aa98ffc89e1dca619e17897d0e0a7948c50b80e0173b3c5b78318ac83a79fcd462d2c7949e5d4816a963f81599d36c2fb5c10ea7d590d0a0f1039b1fc89ecefa4d895567a52bc64bb1b4ea9986b415c07ca381c054533de6a936ba2fd7ca5e92108c6e50268cb4c6fe1e1c2f5b02ea1b8519383b8dc2ec7670d672d4cb85d2c08edee5421443d7e2cef5d2a91d690825e96075db765364bfaf89a3bf9221ad9dc27410ab6731c04fdb2187a77d480f2716030ee6ca8f631121c464f838af482ec05c809dc567ad05ed019d9cef355e6425aac50354585db1b9d8fe3bad8a287548aa6fc72d39eb264bc3f530433ba596b3bcc3748976c3d49fd0bc660ca095b2ffb6402011968499ca738a422f39144f4cfa0e629519a06d0de2be697ed762fe3de1ac571b3cf351096ace77bbc8b002d150557598d7007bf2b68626d0969afbe295ba3d5495294aadc8c1c00ec3bd501c224c7605ec15a9cf4e03a538dddb6f5798c7366f8adfa12c6eede87ca9dbb0c2272d919161e9003a9ee3f2f5ecd26693f3dff1c63296e0cebefd7dd5c1f88dde4ef96b63a11bf7517c8ddd8eb1d73f2aecdd5b2f17297dcae0c5da20ad2382f4b2c2d4d16eda665b75666a9becf7630c80ef457bef10d430fa5f9bbfb37acedfdba3c241e7bb384608c437f53c94a9f2c9060d13ac811cb1bba9e9e3cc63338ac3a0b5de9f2f50d2c34c25abed14bd1696f7c6f74d1a424871a05a84f59a2e0524f5338e6dd98704e4694bcae970512fff3b500e79fea1370c9c0af28d2494c793eec9a5320ef108ca59a2d2e0f9a4b443300f4bdf1d307a6da0b849d4119ef882894d2929624b9180d9a5857a5b68e91bebeb94cf4db3c159cb12afb226a07ad878de72ace558d2b6372861797d3e828abbcbeed977936433b47cc6611b8728a29bb48297d387e469dec61ba3bc451734b69e962aeccdab3c151392a37253e2acad32ae6cfdd3b4840f9ca57f3f330f6203e9608635d88478a5c16d86087c7d44bc7d08676580aba3ce2b21927408acc41eb70618ca8a2d19b1e2a0fd627e0967a57c60786c30a5547a3b0a906a26a79b6f08e79fef0b72596bca6eba142bc1247cc1565a5e3c07ad6ad909cc245b8a85c1bb9b3b72c789a1815981294e96fcf50290a96c2bb87a36474a941b026c3f365b1c0391585ab4fdfa9cdd7777ad6077b7ba850fb4bd0037d4ac59df86115538a29be4aec32dbf1bc209df99caa862f77e8105343d5b9680c34aea12b163822730931b66feeec2a12ef2f0127c4e8ed7ff54a2ef556a49eb598413605dfe1ce2dfef4aabe28050a52aed8ad9f4d86864abbb8aabd3bb1bafe14df16d13c9ecaae31dbc8e0d2941a16d8c45802f025b3cf3944a4a876f77686b9aae40ed9c705c3682af9e48333fa920a4ec1a205256a52f8158210f1b06bbf74093773c8d6be7c2d4938af536116a2f9be92d135ed9696f4176c1054a80d8c406b7661e20abb16af8b1662f8f3666492a8c839b03372d4703a35674b9cf4ed8769616d2405f0203153d2a88dc74231f2b16f84e8d30dfeb39bc32e12a1d0123a689f2358d44583eae08a052fd2ea19158a2f40d8b354a6c3008be35c71128678df24feafaa79e488dfa04d67468338bb6d70ea778f771f1d5c62a5706b91c4300d2eab63092bfe64b33c01fcfd8eaa3a25825ff5680a6300919adf67301294baf67e541ddf4544f3f8ad85f9515e7c29100170e8ea2648955caa2e6e0e078cacf06c3beb18c1607e16dc2ddeba32be531fbcac7153e0b11b81983262c9d1d703c47a95f37870d44c5ac44efbb571bce89e406cb1f3918197141915da9ba2106d41b296122c1dc53cfc7ab9a8ac3259a328dbfe29b65672e726016e7db3305916bbc018b48c855e54e1b6de0a2d281307873f894dca7057f638ea95b2d31ee5f29bb811ff6289fe7d3d9ab3e548489cb92609e1df6b2c11a940966dc59aa997a9a25c6", 0x1000}, {&(0x7f0000000800)="f706076c7b85bf689382e9b640e5e7f0a9", 0x11}, {&(0x7f0000000a40)="26bc51abb07d1fd1da7be7af528ef4661e840b04b4b921784a9817a849796c5ae87d2006ad97fd82df36548e234115b7dddab68fc3332a49318ea4d472d55474c733f515d831aca4b17a90b6d2f8a5bbc891a9820e6abbe182124d898c6baad0c32d27d6fcaff89159c8e4f81efb5c63fb0376d1c80afa163b81c79c32c8ce717f000b6b3969bff6f7d0b7c91c36d6ff4eba9e4b28ad4c554a2bbc5fb5709d1a4f1b12f22ec048727a5b52f79be9de10a84a278453a97e85dc54e2edf8d73d702b88e65dc9c1c3f0af8600c36ada13ee83e06c97608a4857cfe0f86098e05e94dff6bf2c488f82f87ebfc8a81cb9cbfb39f613c0f3c3071ec1", 0xf9}, {&(0x7f0000000b40)="59faa95de134550d410918ff898145eaf3bf6b1c81023075cadb94182067abc69b8c4a274849a20c285a4313aed7dc6fe6f8810cace5acc1970639f18f6b6c9ffb534ad3eda4ecdff751257a332b35421dffd0584b3c9b28a08e09ba4c2a7201a7a8bed012cf4ac5c60f3da598b3a40c6fd79f6af09206117a9f081e91af488b282714095a6f04a01d7872e05718751beb7253a6d01515f22dca69d70486721b52720078e52f9b1715f7b30f14fcb8d36697de60f73bbe3dd75fbb123a8f9a5e0954036137", 0xc5}], 0x6, &(0x7f0000002280)=[{0x70, 0x112, 0x7fff, "e6df012c53a5cabbcfc019dddc1ba44b2d9a8d9e34a571b8f2a1d5b368a8092f69b9e5c67b1c42db192430d68e19e1142919525e7f09aa0993dcaba715163e8307d63db97c119465294b69564d1578af331fd4f496153816904bae6e65f600"}, {0x18, 0x108, 0xffffa1f6, "e8e9"}, {0x90, 0x104, 0x3, "63a602c0c559ac0d7f61e107665f1b1bdf710ef9f6159ce84ba6c060e33633dac48f9c0fdd541ed4fe7ee788883eb05ced86dc3287e81098b3a87821e754e53e6ccd3edff1e310ffc8d347c1a36efcede8f140e61bdac62bee24d96f1b52953c4414f82ec9098fb1aa82d0d936216186443e1167a18d1e12bbedd0f1"}, {0xb8, 0x11290b82f240935, 0x7, "b04fefa62ca9acb00eb8002f03826a51186bec499d9a7298dd4fb3db695fea78c33bea89f09d755156455082f825415ce8a50fed979e2e11c01ab49fc12c0a997dc3d1e35c5d8df78bb3e817419e25e1d09801aa2c97952893257c44d1f5e44793aa1c4c66f63076282c0d0344ec24c917bb5ab339a0f94da65754763bdefcc683084350edcac9edd65e4f60a1faaeba4e8879e190e8a5050f9edd2b7bf84611b3263bd9804a"}, {0x48, 0x10d, 0xeaa, "601a2042e607e8df6d94d12fb9e26ab152c08539bf1711cc96d0f0f719f9c1f5cfa43e0ae7c199315875efcc7d2d94bb45c497e3edd2"}, {0x88, 0x104, 0x3, "eac56ef51cde7c583493308c5af5ee82c424aab0df6e6e126f694ec328c2cffe451fc89c800ca70018985d7fe3d4c34e230c8eeb4f4f2bc199fa018ebaeff99eed5649b8ed24b17933e47f334761222826388c1a141d15d795144f8e0db4f9c871397d2949366a77287e270d233ecb65fb57"}], 0x2a0}}, {{&(0x7f0000002540)=@ethernet={0x1, @local}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000880)="5897052990", 0x5}, {&(0x7f0000000c40)="aea60a9092d89c8f53c529233570365950081518e2884dfaf65da6987d74669e250185f708058a76f511f06e65ecf2a32a2c", 0x32}, {&(0x7f00000025c0)="bd511196da2da8e4b6d029f5f52303b814a32bdbeab8a9bde8f0d2e5fcd90d62e5e2acd8ce242b3b80dd6b79a44f51d8215f2110eb83af19e1b8afce40c1958ddd10cbee1f89277ffcb01d5f6d52d35f4248b42246b3f4d24e656468cc47d8057cdc4368029077eebf6052236e32210ae9653dfa3208b9dc672781c64486815852ef15e46051a2e37d1935504ba4845f93251bff739b87c955c63e98459f6c043976fd47aef0e5", 0xa7}, {&(0x7f0000002680)="7a853cc49f7db4e1a27421483529793aede1799792f96ddc66d89434fd", 0x1d}, {&(0x7f00000026c0)="7f7a7753add052402c7aa9ee4b7a12cd3c730a8eafa0806f3bbd658544d8d4316264ea85d9e9c6e5aa88eee9598195b505c306d21ef9b232210b1ea416ebaabde88872bf1003f42347420d0359b5e7fbbc4ebe0cdf5e6c4d442428910ffe3424cfceab80e251b2d2ad75c6a5837b9c22d71a33f2d8cabab247c715fa228c445cb1f5e0f3e8d1665e5bade895d9014355d7158b6aab955978a8cf42889afbbb2ed2f839fc00bb6f2d2f04", 0xaa}, {&(0x7f0000002780)="8f008cf62213664b1bccde35e1393df07b76997ff7b51004afed0d35da7b433f75abbeb189a5c35e44d5050fe16d69b76545adfbd2c8d1fa62f2bc3a22f15fd053eedf8ce4d3ffed614db326c23cbec9", 0x50}, {&(0x7f0000002800)="52853ef97a67bdbcff73677f844de40c437a7c050d9dcaf02e82c362dc702b8c0020f23ed510c2a896734a809a62eeabc776b379938de28e56e405173390eb0cdd83eb13f65cc4182e79b9241437b1815178fa57886092f97cde4836932fcc1aa963584f9fb8fafba1094e4bc67f358e75d7e4c4626b9eadc9", 0x79}, {&(0x7f0000002880)="22f7e13b47d9a02bfbde5530a859b784600e7fe886dd5bc69ba62278f536da917a90d16c4acd388e22bf3984549288ec4682ec8d13cfd2475ee69d1c06fe281977d06c6c059b71653f6d7bedef2065e956d1332567bfb94b9de2c0b8fc54", 0x5e}], 0x8}}], 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) [ 537.936200] audit: type=1400 audit(1573508169.972:866): avc: denied { create } for pid=18690 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 538.364952] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.4'. 21:36:11 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x85, 0x0, 0xca}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x8001, &(0x7f0000000000)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:36:11 executing program 4: sync_file_range(0xffffffffffffffff, 0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x5d, 0xed, &(0x7f0000000400)=""/4096, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 21:36:11 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:11 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:36:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(0xffffffffffffffff, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) ioctl$int_out(r1, 0x2, &(0x7f0000000140)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r5 = creat(0x0, 0x0) r6 = creat(&(0x7f0000000840)='./file1\x00', 0x48b27f7e733975aa) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000240)={0xf736, 0x0, 0x0, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000}) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = getegid() r8 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="2400fcce08387b9cb09af6ebf16a9ea077c70b47368c6f4f04f812f0c123d27ffbf0cadb74752eef088f07ff1d09ce5262c3f6b5c110acb60a562efbf2355af1b3912bc2568ccf5705b3816ab94af8aae7586f7397741343a0163a2ad27c17afae71dc21dd5a612443ce2b9822cf1293588a709e9271abe57d2dfaf66949a1047937a57d2e5b831b57a0e7637f03b2c12f24dd6a4a5164d865b1a9cbc0e6ba687a7ba24248f058519365620dbcada24e391f21968879921a1e2eb04047ec56c8d76ed94c445e0f", @ANYBLOB="23042db0000000000000000000000000dcb34b53fd45dfd9ee4401bc000000000000000500"], 0x2}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c8ae0400f9fa423afe7556c7ee8e8afc2655d42af0fbd6ea", @ANYRES16=r9], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r6) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r10, r10) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x80087601, &(0x7f0000000100)) 21:36:11 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r0, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='teql0\x00', 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x6, {0x8}}, 0x18) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000001c0)=""/176) [ 539.441413] audit: type=1400 audit(1573508171.482:867): avc: denied { create } for pid=18702 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 539.640962] audit: type=1400 audit(1573508171.672:868): avc: denied { create } for pid=18701 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 539.703859] audit: type=1400 audit(1573508171.742:869): avc: denied { create } for pid=18701 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000c0605"], 0x7}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r3]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socket$inet(0x2, 0x80000, 0x7c) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:36:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(0xffffffffffffffff, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:12 executing program 4: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') fchdir(r1) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#!'], 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x14) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21:36:12 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 540.252965] audit: type=1400 audit(1573508172.292:870): avc: denied { create } for pid=18748 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 540.389091] audit: type=1400 audit(1573508172.422:871): avc: denied { create } for pid=18749 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:12 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 21:36:12 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) recvmmsg(r5, &(0x7f00000053c0)=[{{&(0x7f0000000140)=@ethernet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, &(0x7f0000001280)=""/230, 0xe6}, 0x2}, {{&(0x7f0000001380)=@generic, 0x80, &(0x7f0000002480)=[{&(0x7f0000001400)=""/4096, 0xfffffffffffffda2}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000002400)=""/85, 0x55}], 0x3, &(0x7f00000024c0)=""/183, 0xb7}, 0x7ff}, {{&(0x7f0000002580)=@nfc_llcp, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002600)=""/131, 0x83}, {&(0x7f00000026c0)=""/169, 0xfffffffffffffec3}, {&(0x7f0000002780)=""/112, 0x70}, {&(0x7f0000002800)=""/14, 0xe}, {&(0x7f0000002840)=""/67, 0x43}, {&(0x7f00000028c0)=""/251, 0xfb}, {&(0x7f00000029c0)=""/85, 0x55}, {&(0x7f0000002a40)=""/168, 0xa8}], 0x8}, 0x1}, {{&(0x7f0000002b80)=@x25={0x9, @remote}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c00)=""/42, 0x2a}, {&(0x7f0000002c40)=""/101, 0x65}], 0x2}}, {{&(0x7f0000002d00)=@tipc, 0x80, &(0x7f0000003200)=[{&(0x7f0000002d80)=""/27, 0x1b}, {&(0x7f0000002dc0)=""/6, 0x6}, {&(0x7f0000002e00)=""/219, 0xdb}, {&(0x7f0000002f00)}, {0x0}, {&(0x7f0000002f40)=""/179, 0xb3}, {&(0x7f0000003000)=""/103, 0x67}, {&(0x7f0000003080)=""/192, 0xc0}, {&(0x7f0000003140)=""/188, 0xbc}], 0x9, &(0x7f00000032c0)=""/214, 0xd6}, 0x4b34}, {{&(0x7f00000033c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/121, 0x79}], 0x1, &(0x7f0000003500)=""/187, 0xbb}, 0x100}, {{&(0x7f00000035c0)=@nl=@proc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003640)=""/128, 0x80}, {&(0x7f00000036c0)=""/9, 0x9}, {&(0x7f0000003700)=""/205, 0xcd}], 0x3, &(0x7f0000003840)=""/233, 0xe9}, 0x7fffffff}, {{&(0x7f0000003940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004d80)=[{&(0x7f00000039c0)=""/60, 0x3c}, {&(0x7f0000003a00)=""/111, 0x6f}, {&(0x7f0000003a80)=""/201, 0xc9}, {&(0x7f0000003b80)=""/65, 0x41}, {&(0x7f0000003c00)=""/201, 0xc9}, {&(0x7f0000003d00)=""/114, 0x72}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x7, &(0x7f0000004e00)=""/37, 0x25}, 0x5}, {{0x0, 0xfffffded, &(0x7f00000050c0)=[{&(0x7f0000004e40)=""/24, 0x18}, {&(0x7f0000004e80)=""/109, 0x6d}, {&(0x7f0000004f00)=""/120, 0x78}, {&(0x7f0000004f80)=""/252, 0xfc}, {&(0x7f0000005080)=""/23, 0x17}], 0x5, &(0x7f0000005140)=""/47, 0x2f}, 0xfffffe5c}, {{&(0x7f0000005180)=@x25, 0x80, &(0x7f0000005380)=[{&(0x7f0000005200)=""/154, 0x9a}, {&(0x7f00000052c0)=""/146, 0x93}], 0x2}, 0x3ff}], 0xa, 0x10000, &(0x7f0000000000)={r2, r3+30000000}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 21:36:12 executing program 2: pipe(&(0x7f0000000080)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYPTR64, @ANYRESHEX=0x0, @ANYRES64]], 0xfd8a) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2) 21:36:12 executing program 2: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x10000, 0x8) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x3c) ptrace$cont(0x18, r8, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r8, 0x0, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket(0x80000000000000a, 0x2, 0x0) fstat(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r11) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000500)={r8, r9, r11}, 0xc) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9a1bc5092b94646cb2e1208e79396bc795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef63d445e5bcef53d3a47853e7af5d0328209ad7322400"/114], 0x0, 0x0, 0x8000, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) eventfd2(0x7, 0x800) timer_create(0x4, &(0x7f0000000340)={0x0, 0x3ffb, 0xd, @thr={&(0x7f00000007c0), &(0x7f0000000800)}}, &(0x7f0000000380)=0x0) timer_gettime(r12, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x4, @loopback, 0x6}, {0xa, 0x4e22, 0x89a2a6b4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, 0xff, [0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x5]}, 0x5c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) nanosleep(&(0x7f0000000100), &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 21:36:13 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x2, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) signalfd(r3, &(0x7f0000000040)={0x9}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000080)) sendfile(r4, r2, 0x0, 0x7ffff000) 21:36:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(0xffffffffffffffff, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:13 executing program 1: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, r1+10000000}}, 0x0) r2 = gettid() setfsgid(0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) r3 = socket(0x18, 0x0, 0x3) sendmsg(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x3ac, 0x0}, 0x0) connect(r3, &(0x7f0000000000)=@ax25={{0x3, @default, 0x2}, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80) tkill(r2, 0x1000000000016) fchdir(r0) r4 = syz_open_dev$mice(0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r5, 0x10, 0x0) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r5, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0x204) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) r8 = request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='system(]eth0md5sum@&}#securityeth1$\x00', 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, r8) [ 541.022032] audit: type=1400 audit(1573508173.062:872): avc: denied { create } for pid=18785 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r2, 0x13, 0x0, 0x107fff) ftruncate(r1, 0x208203) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) 21:36:13 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:36:13 executing program 2: timer_create(0x3, &(0x7f0000000000)={0x0, 0xa, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_delete(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0xda, &(0x7f0000000140)=[{0xfff8, 0x0, 0x0, 0x1}, {0x6}]}) 21:36:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clock_getres(0x1, &(0x7f0000000740)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00\xc2(t\xf56c\xf71E\x9e\x90\xac\xa4\x19\x7f\xa1\xb8\x02x9\xff0\x7f\x94\xa7\xbeX\xd2\xed\x0eU>@\xaf\x11c\xce19\xf5\xf8\xd3\x19k\x1d\xa5\x99\x89\xb4=\x1b\xde\x88g\xf4\xadi\xef\xbe\x13\xaaU\xdc\xdcw\r\xe1 jy8\n%\xde\x86\xb8ExAkCBp\x18/\x80W.[\r\x13\xc0e\x8f9i\xc5\x95\xca\xd1\xba&?\xe65}\xe9\nl\xb4b\xa7\x9dH\"\xf3\xaa>4\xe9A$\xf9\x04\xeb\xd5\x00\xb7,\x80\x1a\xaf\xbeP\f\xec\xa8\xc1l\xbb\xe9\xc2\x01\xe7\xf4mD\x80m\xc2\xbd|\x06\b\xd2\xc9\xdb\xcb\x83\xb2\xda\xa7\xc5\xf1H\xd2\xf7i\x95\xb7\xc0\xf4nEU.\x0e\x9b\xb6\x87\x13\xd5\xa8\x7f\x16\xc3\xac\x9d,\xa24>9\xa46\x8c\x7f\x00\x00\x00\x00\x00\x00\x00\x04\xf6\x8f\x0e\xc7\bu\x81w\x87\x9f\xec\xebQ\xa2\xf4[3\xdeF\xce\xf2\xb4\xf9H@\xce8\xe4\xf8\xd3\xf0\x1f3\xae\x86\xc7\x88\x8fF\xf4\xf6Z\xaa\x1aUJ\x0fU\a\x89+\xf3<\x9d\x10T\x9aM\x82\x01\x18\xd2?{\xa2C\x9dn8\xc0|\xb4\xce\xa3b\xefyY\xe0\xd9Q1\x8a\xc8b=\xc2u\xae;\xb4?\xb3\xd98\xf3\xb6a\xb6\x92\x863C\r.?!\xee3\x8e\x04\xa8\xba\xba\x1bE\xe0\xee\r\x10n\x80\xd0Iw\\vmx/\xadZ6\x0f\xa0\x86\x7f\xfd\xccJ-Q\x15j*\xcdk\xfb\xc8m#E\xef\xe8\xda$ 4\xfa\x03\x04\x80\xd6w\x11\xdf&\x1fM\xe8\xaduh]\xba\xef\xf5K\xf3\x98\x18\x87Om$\x1a\xb20\xd2\x83\'\xc9\x00\xc1-W\xa2.\xe7\x11\x9c\xe2$\xbb\xaf\xb1\x1f4\xa1%\xaeFh\xa0k\xb2\xacQbf\xd5\xf4\x9d\x0f\xd1\v.^?\xfa\xee\xff\x0f\xed)\xef\xed?\xf9\xb9xT\x00\xcaJ\x0f\xe0y\xefj\xc2S\xd3\b\xac\x02H\x9c\x9f\x88\xe83J\xde\xf5\xc0\x00\x00\x00\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2e6cd7a8}) ftruncate(r3, 0x403) r4 = open(&(0x7f0000000140)='./bus\x00', 0x140042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/context\x00', 0x2, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000440)={0x20, 0x0, 0x5, {0x6, 0xe, 0x7fff, 0x19}}, 0x20) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f0000000500)=""/139, 0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000780)="1f4d62ffcdf9eb57d4f0795d5fb3f03bc13968479a49859a526e173ab4ee798d3b37a989a4090000001a954c3a9185982a645ea95ba31eee5cdef2309f847320ff34a80c06ff5c867cdd2047c663cfc069aacbb19a9f62c879", 0x59, r4}, 0x68) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) fdatasync(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000680)="3166b5ddc2bf03f25cc31cab8fdd4ed96183a97debf7d9bc8281f36ffd88b069354fff6631f5407fb05df3133fed67a6b2c673b07838c8bfe21b6ce76795dc645af2246bdb79a19ec7a7920de89a481d60ef3762", 0x54}, {&(0x7f0000000080)="384c4d786ac8d4cf5b30f934d465d681a36a50bb672df7c96d2d653881f88efd698325f703aa1ab1e1c3cd", 0x2b}], 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "ea83be61a9a16011", "98be274cb6a24652627b48d30f1d2456", "3af249d6", "173fe5be4d507937"}, 0x28) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r9}, 0xc) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000640)={@ipv4={[], [], @multicast1}, r9}, 0xfffffffffffffe4f) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001480)={0x0, r5, 0x3, 0x0, 0x3}) 21:36:13 executing program 2: unshare(0x20000) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000300)={@remote, @loopback, 0x0}, &(0x7f0000000340)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r9}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005e80)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000005f80)=0xe8) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r11, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r14}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000005fc0)={'team0\x00', r14}) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r16, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r18}, 0xc) r19 = socket$inet_tcp(0x2, 0x1, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r19, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local, r21}, 0xc) sendmmsg$inet(r4, &(0x7f0000007380)=[{{&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="2abe50ed11675cf8dc13440058f8f6f9b222f2d3c02e494b30d7ccaa04c16db2a880625886306539c2e3e6403686599ea26b12809172213de2c0e257b8c2519b1a0f6c62f95691bd7eaa33332c3ec5b8cf6d947750924a58b6448e7d28a49d39da7c509944e3b74baa2bee8e42a80bd8b397ce5f91617eb8ac5179ca89b946c8d69339d915d8442a6d16df4e641f6603f6bcc6b1aa713f1848adb67097ba12f58e13149ed13707d445798350812bd1e0594555c2d1ec2b597344c4cdf4750788cf6fb8e40294a86b49d40d2806", 0xcd}, {&(0x7f0000000280)="5694b16236f8637b256f99095afac0132a4b3de92192188c072238bbce781eea5d9eb35bd2e21b4dd0c31d", 0x2b}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe3f}}], 0x38}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000400)="379639de7c0ee9c71e86b2d96ab590408234800a94b5309ad5172e4564aa734eb1ab47af84a12f08d6c2129873e547822743ebcd82fbf98870edad834527cc61233eb389514fb63b8cede4010f7f76028c44b9050900e0f89c3806b5fbac4f8be57f9746704386e28fdf3d270c3ff71d667ae2219d9bace594e97ad83d4cc7fff4d7a3171cecd5fe70803125fb2578", 0x8f}, {&(0x7f00000004c0)="a174d560064076ddc6912646231ca6723ab14dd5de03ac784d92a105d2f10fb623af343d9059c4fd150bf0aac7200c1739d37ce6c7ef0fcfc5a864e371ce51ca333472b4ea265fdac596db3085feea14f028543138f63c0ff274ce5c132b2f8409672f286833a42ccc619e89ccd537db9356c502f7a7a7fde8ebb810245dd39ee971dfc9", 0x84}, {&(0x7f0000000580)="660e55d2c0155ba037aaa5b96cdccd60c02165e539b89831f3a1dcf2eaa19c4b45198ff4e483fa7efd40735df143b1a99445aeb92bebe3cf679674f424c405d81323946b4873f6d8ceda621c4b48e3cb", 0x50}, {&(0x7f0000000600)="df07e64e793d880e1b232f818227ec599161839f8e7c0be847974e24800cd689f68562fa59df472c2a9a78ce890e3f776192c9850fa66861920f54be32e950aeac7d5254c466aac36809035e0086228594290420519e125ab54b39f8f4fc515ed91e46c12803348d8785ef3981f029cbcad2a6d0d9edd6a952b46dfc410daa5ca753f914b67b79652a81cdd29f052bcb95640e3f23e2270d2f8d37e86944c11f03aa2ab608141aa4da6acb2e41a0481b04614408738498a18d2508b9ea4e8a455cbd27d55d6c5b27903f3c15877cfb586e357173cdc3fe20e0866e09f1dcaf9d6e3aa1f899", 0xe5}, {&(0x7f0000000700)="a349e7e9c7daac25a42cba227a08451283deebe38b8bed8d49fb88f52a59d96e184de61dfbfa307490525598fac0ed0db04a2b064394c05f3ed9", 0x3a}, {&(0x7f0000000740)="794a8de44020be112e8f1bb1c2e785380c68997be0d505bc6e104ef6d89556cac8ab72627308f1f7399f4c5bfb0937d45cac1b06efec923d3ead2ec48b466a9a34bfaff56231cde26ed48faba01d3a99cb1a517a5c835fbab21625f0432fd4557a62ac0a59f5e4da089ed1a3cb6f9f87f12cc73a0884794aec97cdd168561ef547915c4bc0e7fbe67e4fb2c9cacb36ce41e7978aa25adbfe0749adff752f95d2a7b90b56774c6893b0e56676e1bc12ea4d94b059c936782479f1c9b58160a1f7d72b2d4949b91236bd3e4d263a0fd8d32cc7a93c9af08ee7b0c66536c88a8ec1647a", 0xe2}], 0x6, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @multicast1}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000900)="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", 0xfa}, {&(0x7f0000000a00)="0ef3472c596ab2810f12f8f018ead69bafde6e4ea8fa0d7a2131e1094399662c046e7ff6e41415e39d9fe4476b1d48d5eef09338cb9de5f86495b95c6729fd9f728613f56697902140db5a7cc38adcda032bb92967e8243144f388de93b87faac0993f65b38b", 0x66}, {&(0x7f0000000a80)="dd454d1b8fcc3fb7dd88e8cc875cf4750cb1e4c3f149e0fc580028a4da5f8f7b9e3b5463a4707a909a4817377b71c97a2051a9bfe170429505643a345437161b7c1d96290c6c4920cc000958e96768ecff5d0c856edec867335d9e8b1be19b81f8c63e00d7681d81adfeb98c68c694df1c9d3696123b25949d544e041ed85715111253b2a82f88cc6bb4ca9881cdeb6d3a4f70803956125fcdfefd8599b9857b6257ee1b04d3540d2c5155", 0xab}, {&(0x7f0000000b40)="365d02548bac250e5bb7ffa499540a3c713ffd4d44e3bc9e3b7192a30a9ad2899e57c6cc56c5a5c411f6cd8f0f5b32d94a7195fe0592737d5378c9cd34e6551ce5502f690235967c275cfe78f0c2ef5d5350053d53ffa1", 0x57}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="4317eacb53f9148fd47335f07e466d6c436bea2e7348935ee8b971e83ec731990784dafb30ec6ad4129ab76d006d6e7ff1234cc0fbc59603d1bcc0e0989596485bff6b8af65057700d363fba48be04971ac884d4cfcf93a69896e27cff3615b1618c8ec4ee7b7cea02eaa754520cbeebbaec309a5f2059abfe170562383fc063eacc8056a486b302753277c674cb4ae3f3bd4cbd3d9c0a122f0b9aa7dba2", 0x9e}], 0x6}}, {{&(0x7f0000001d00)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000001d40)="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", 0x1000}], 0x1, &(0x7f0000006000)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @remote, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x88}}, {{&(0x7f00000060c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000072c0)=[{&(0x7f0000006100)="d34cea7d8e595a08aa893a79868dcdbd3e2f93ae4269b1851e4311f788a1dfc17927223fab80075aff856bab9c2210edd9b6b0c00a6dce46cddaa8d3ad2f7fcdd5c43caa53971b33f183cf978263c870c454b800efb91ac433adc3d3d796716c068daf7de87b73e5b4", 0x69}, {&(0x7f0000006180)="3a5edc4f96b570fe50ca0ca7b42d70b83ba4137aee6a2a9c954ae4f33ef5386ae4312d8da358ebc2c8deae630dada0eb14b1", 0x32}, {&(0x7f00000061c0)="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", 0x1000}, {&(0x7f00000071c0)="06c8ec4adf4fba91808b4d374ed1900d449c441076ef789cb9b249617a00d76f63154822c20b912951d318d0a4982515da92505b065f3805047315944286887f337b6ae92236564e23183fc563f2537705474c84a838598720120b9e26678f557ea3bcc54c876e06c707a6bdcb26317ac392b086d52922357dfcff851b91c44d4d26f23a4bae7eb55b3b2ce337d3dc76c5fb6b53c9fa102e74be1ce2e67ede5a1f8e9e575927db44c70117dd071e36c70271b5e5a9d85b2041cab218ada10b6189cf02718bc8689139a9b0b3bad4cb258d9e744bea3c7b03e27723b7863e553586c984c506c31ee672", 0xe9}], 0x4, &(0x7f0000007300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @multicast1, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r21, @rand_addr=0x8, @local}}}], 0x58}}], 0x5, 0x80) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f00000000c0)='./file0\x00') 21:36:13 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00w\x06S*6\xee\xa8?\xbd\xc1\b\x10s\xe3\xc76\x87\x7f\xb9\x1e-\xcex\x18k\xb9h\x9f\xe6\xe5g\xc0Q\xc8\xc5\xcb\xe7\x05\xd1A\xde\xa5\n\xcc\xfb\xa4-\xde\xa6v\xac\x9aw\x89P\xc7,\x1e\xf7\xfa\x1f\xa5\ak\xb8\xd6@n,H\x06E\xd3\fm\xe3\v\xadD\xe5\xe7\xaf\x85T\x85\x9a\xce\xcb\x8a\x01T,]\xbe\x06C|\xe8\xba\xfe5\xdaJ8\xb9[\xbbW\x9ei}Y\xfb\xb5\xc7\x97y\xf3>\x05+\t\x1f\x1bM\xdcM\xd2\x95\xd2F\xb6\xe6&\xa8\x84J\xe6\x15\x7ft\x9a\xe3\xcfB\x84\xa2o)\x92\xfa\xe1\x8bR6Sq\x01\x93\x8cV\xf2#!\xb2 \xdf\x00!S\x9f\xef\xf0\x05\xc6\xf9\x04\x88\\\x05\x93\x99}\x95\xde\x94f\xa6G\\\v:\xee\x80)\x87\xb9\xe0\x87}(a\x8a^e(\xe0\xfcl\xbb~\x03\x1fq\xd2\xfeD\x8a\x13\x92e\xe6\xf9\xae:&H\xa6\xd8\x8arT\x84\xa5XN4\xf2\xf9\xad\x9f\xdf\xbf<\xd7\xf6', 0x200002, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440), 0x12) socket(0xa, 0x800, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10) socket(0x18, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xffffffffffffff40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write(r6, &(0x7f0000000780)="804e45dfb905e9d374bc44b5b4757fd7885c082790891ef815de0bac6f1b834f926a1764d24c7ba70bfc85c3302b727c0f748631b13d632ebf1a7c36174d154899c39e69a335b7521613b6bd7e717c8b68743bd0952c959b98dc0dd4198997a65adc9254a2940b2e1003fa14de41d1ad14a7d8eac82f", 0x76) r7 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0x325) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000006c0)={r7, r9}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[]}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r11 = open(0x0, 0xce983fc8522842ff, 0x5c) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a8a4c0d81881ccdbe7512049c03425ab36173f9431a4731452f1db427871f403eec4b337159edbd7c977"], 0x1}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r10, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) r12 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f00000000c0)='./file0\x00') mkdirat(r12, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x161800, 0x180) renameat2(r12, &(0x7f0000000340)='./file0\x00', r0, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 21:36:13 executing program 2: faccessat(0xffffffffffffffff, 0x0, 0x0, 0x2fd) futimesat(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000003c0)="a35f921fdac703c517d2006bc299756a7c31840ee6caede2ea9062ad4ea1ae8b59d06243d6cea4a718997198551e13caa1d6c95498722d32da6425ef65da1803c7b4e95f646773d37398f9271863ac65ca2cd292fdec4e03fa8f44098ed2c5a4e687e663baabc26d1fbb2b7986b4ab1316ff49ec4d71f02cf8599b4d4a70c7eff6dc43ee3110836675a6c15710632d", 0x8f, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x10070800) keyctl$get_security(0x11, r0, 0x0, 0x0) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'\x06\x00', 0x3}, &(0x7f0000000080), 0x0, r0) r1 = request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='syz', r0) add_key$user(0x0, 0x0, 0x0, 0x2d, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) lsetxattr$security_selinux(0x0, &(0x7f0000001180)='security.selinux\x00', &(0x7f0000001200)='system_u:object_r:public_content_rw_t:s0\x00', 0x29, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) dup2(r2, r3) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) r4 = eventfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000006bc0)=[{{0x0, 0x0, 0x0, 0x151}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001480)={'syz', 0x1}, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) writev(0xffffffffffffffff, 0x0, 0x0) 21:36:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x10}, 0xffffff9a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r2, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x80000001) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r3, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r9}, 0x80, 0x0}}], 0x300, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="f977ac0bdee101f7c0f13f8fbcb5674a805616fbe59d8142c090b5836a143c85053b19c89beb83ad620ffe5d27de83bc6376d1a4", @ANYRES32=r9, @ANYBLOB="080003002f00000008000800ac1e010114000900fe8000000000000000000000000000aa1400070066e329c7949daacfcde122b5862fe9b0"], 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:36:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:14 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 542.255755] syz-executor.0: page allocation failure: order:0, mode:0x2200000 [ 542.263104] CPU: 1 PID: 2109 Comm: syz-executor.0 Not tainted 4.4.174+ #4 [ 542.270019] 0000000000000000 b4b82d065135914c ffff8800a6e874f8 ffffffff81aad1a1 [ 542.278044] 1ffff10014dd0ea2 ffff8801d5822f80 0000000002200000 0000000000000000 [ 542.286054] 0000000000000000 ffff8800a6e87608 ffffffff8148c0cb 0000000000000000 [ 542.294060] Call Trace: [ 542.296627] [] dump_stack+0xc1/0x120 [ 542.301968] [] warn_alloc_failed.cold+0x78/0x99 [ 542.308269] [] ? zone_watermark_ok_safe+0x290/0x290 [ 542.314924] [] ? check_preemption_disabled+0x3c/0x200 [ 542.321747] [] ? wakeup_kswapd+0x16c/0x4f0 [ 542.327609] [] __alloc_pages_nodemask+0xef5/0x14b0 [ 542.334171] [] ? type_attribute_bounds_av+0x1cb/0x740 [ 542.340994] [] ? __alloc_pages_direct_compact+0x220/0x220 [ 542.348159] [] ? ebitmap_contains+0x220/0x380 [ 542.354292] [] ? ebitmap_get_bit+0xa0/0x180 [ 542.360245] [] ? constraint_expr_eval+0x254/0x1310 [ 542.366803] [] new_slab+0x2e5/0x380 [ 542.372059] [] ___slab_alloc.constprop.0+0x323/0x3e0 [ 542.378787] [] ? trace_hardirqs_on+0x10/0x10 [ 542.384823] [] ? avc_alloc_node+0x27/0x3c0 [ 542.390701] [] ? trace_hardirqs_on+0x10/0x10 [ 542.396742] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 542.403474] [] ? check_preemption_disabled+0x3c/0x200 [ 542.410292] [] ? avc_alloc_node+0x27/0x3c0 [ 542.416166] [] __slab_alloc.isra.0.constprop.0+0x50/0xa0 [ 542.423254] [] ? avc_alloc_node+0x27/0x3c0 [ 542.429117] [] kmem_cache_alloc+0x214/0x2c0 [ 542.435076] [] avc_alloc_node+0x27/0x3c0 [ 542.440766] [] avc_compute_av+0x182/0x610 [ 542.446552] [] ? avc_compute_av+0xac/0x610 [ 542.452418] [] avc_has_perm+0x355/0x3a0 [ 542.458018] [] ? avc_has_perm+0xac/0x3a0 [ 542.463706] [] ? avc_has_perm_noaudit+0x300/0x300 [ 542.470177] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 542.476907] [] ? task_has_perm+0x1c3/0x330 [ 542.482772] [] task_has_perm+0x200/0x330 [ 542.488463] [] ? selinux_getprocattr+0x590/0x590 [ 542.494963] [] selinux_task_wait+0x24/0x30 [ 542.500831] [] security_task_wait+0x73/0xb0 [ 542.506783] [] wait_consider_task+0x28b/0x35b0 [ 542.513008] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 542.519750] [] ? complete_and_exit+0x40/0x40 [ 542.525873] [] ? do_wait+0x2be/0xa00 [ 542.531215] [] do_wait+0x350/0xa00 [ 542.536384] [] ? wait_consider_task+0x35b0/0x35b0 [ 542.542856] [] SyS_wait4+0x144/0x210 [ 542.548195] [] ? SyS_waitid+0x2d0/0x2d0 [ 542.553795] [] ? kill_orphaned_pgrp+0x310/0x310 [ 542.560093] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 542.566576] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 542.573129] Mem-Info: [ 542.575538] active_anon:1368141 inactive_anon:68859 isolated_anon:0 [ 542.575538] active_file:10137 inactive_file:21047 isolated_file:80 [ 542.575538] unevictable:9 dirty:16 writeback:14 unstable:0 [ 542.575538] slab_reclaimable:8057 slab_unreclaimable:67903 [ 542.575538] mapped:66153 shmem:71133 pagetables:20344 bounce:0 [ 542.575538] free:7081 free_pcp:254 free_cma:0 [ 542.609636] DMA32 free:18704kB min:4696kB low:5868kB high:7044kB active_anon:2501728kB inactive_anon:124036kB active_file:17884kB inactive_file:35316kB unevictable:4kB isolated(anon):0kB isolated(file):16kB present:3145324kB managed:3021976kB mlocked:4kB dirty:24kB writeback:0kB mapped:119008kB shmem:128608kB slab_reclaimable:14560kB slab_unreclaimable:123728kB kernel_stack:10848kB pagetables:38096kB unstable:0kB bounce:0kB free_pcp:264kB local_pcp:40kB free_cma:0kB writeback_tmp:0kB pages_scanned:152 all_unreclaimable? no [ 542.656061] lowmem_reserve[]: 0 3504 3504 [ 542.660732] Normal free:9620kB min:5580kB low:6972kB high:8368kB active_anon:2970836kB inactive_anon:151400kB active_file:22664kB inactive_file:48872kB unevictable:32kB isolated(anon):0kB isolated(file):304kB present:4718592kB managed:3588764kB mlocked:32kB dirty:40kB writeback:64kB mapped:145604kB shmem:155924kB slab_reclaimable:17668kB slab_unreclaimable:147884kB kernel_stack:14944kB pagetables:43280kB unstable:0kB bounce:0kB free_pcp:752kB local_pcp:396kB free_cma:0kB writeback_tmp:0kB pages_scanned:712 all_unreclaimable? no [ 542.707566] lowmem_reserve[]: 0 0 0 [ 542.711676] DMA32: 56*4kB (UE) 68*8kB (UE) 27*16kB (UE) 57*32kB (UME) 53*64kB (UME) 20*128kB (UME) 6*256kB (ME) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 18704kB [ 542.730176] Normal: 161*4kB (UMEH) 150*8kB (UMEH) 66*16kB (UMH) 28*32kB (UME) 47*64kB (UME) 22*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9620kB [ 542.746628] 102316 total pagecache pages [ 542.750665] 0 pages in swap cache 21:36:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 542.754119] Swap cache stats: add 0, delete 0, find 0/0 [ 542.760515] Free swap = 0kB [ 542.763510] Total swap = 0kB [ 542.766506] 1965979 pages RAM [ 542.769585] 0 pages HighMem/MovableOnly [ 542.773545] 313294 pages reserved [ 542.777121] SLUB: Unable to allocate memory on node -1 (gfp=0x2008000) [ 542.783770] cache: avc_node, object size: 72, buffer size: 104, default order: 0, min order: 0 [ 542.792695] node 0: slabs: 970, objs: 37830, free: 0 21:36:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0, 0x2) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000001c0)={0x0, 0x81, 0x1}) fchdir(r0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) write(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x9, 0x6, 0x3, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r7 = open(&(0x7f0000000400)='./bus\x00', 0x374620, 0x98) fcntl$setstatus(r7, 0x4, 0x40400) write$FUSE_WRITE(r7, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) fcntl$setstatus(r2, 0x4, 0x6100) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r9, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0xffff, @local, 0x403}, 0x1c) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/}e,in7\xffe\xda\x10force\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) sendmmsg(r8, &(0x7f0000007e00), 0x40000000000025d, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r11 = openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x800, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r11, 0x40106614, &(0x7f0000000300)) 21:36:14 executing program 2: openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x10000, 0x0) signalfd4(r2, &(0x7f0000000180), 0xfffffffffffffe58, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r3) write(r3, &(0x7f00000001c0), 0x0) open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1045}, 0x1006) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x7) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) sendfile(r4, 0xffffffffffffffff, &(0x7f00000004c0), 0xbd) syz_genetlink_get_family_id$tipc2(0x0) r5 = add_key(0x0, &(0x7f0000001000), 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='@/vboxnet1\xe7selfwlan0mime_typevmnet1/*!!\x00', r5) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xb, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[], 0x3}}, 0xa4c80) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000580)='\x00\x00\x00', 0x29d) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) setxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000400)='TRUE', 0x4, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000300)={0x427, 0xe0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) lseek(r8, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006}]}, 0x23e) sendto$inet6(r9, &(0x7f0000000300), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x0, 0x200, @ipv4={[], [], @multicast2}, 0x2}, 0xfffffffffffffd43) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x1600) [ 543.005064] audit_printk_skb: 9 callbacks suppressed [ 543.048094] audit: type=1400 audit(1573508175.042:876): avc: denied { create } for pid=18874 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 543.115404] audit: type=1400 audit(1573508175.152:877): avc: denied { create } for pid=18877 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x10}, 0xffffff9a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r2, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x80000001) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r3, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r9}, 0x80, 0x0}}], 0x300, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="f977ac0bdee101f7c0f13f8fbcb5674a805616fbe59d8142c090b5836a143c85053b19c89beb83ad620ffe5d27de83bc6376d1a4", @ANYRES32=r9, @ANYBLOB="080003002f00000008000800ac1e010114000900fe8000000000000000000000000000aa1400070066e329c7949daacfcde122b5862fe9b0"], 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:36:15 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 543.837185] audit: type=1400 audit(1573508175.872:878): avc: denied { create } for pid=18874 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:16 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 544.118081] audit: type=1400 audit(1573508176.152:879): avc: denied { create } for pid=18913 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:16 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00w\x06S*6\xee\xa8?\xbd\xc1\b\x10s\xe3\xc76\x87\x7f\xb9\x1e-\xcex\x18k\xb9h\x9f\xe6\xe5g\xc0Q\xc8\xc5\xcb\xe7\x05\xd1A\xde\xa5\n\xcc\xfb\xa4-\xde\xa6v\xac\x9aw\x89P\xc7,\x1e\xf7\xfa\x1f\xa5\ak\xb8\xd6@n,H\x06E\xd3\fm\xe3\v\xadD\xe5\xe7\xaf\x85T\x85\x9a\xce\xcb\x8a\x01T,]\xbe\x06C|\xe8\xba\xfe5\xdaJ8\xb9[\xbbW\x9ei}Y\xfb\xb5\xc7\x97y\xf3>\x05+\t\x1f\x1bM\xdcM\xd2\x95\xd2F\xb6\xe6&\xa8\x84J\xe6\x15\x7ft\x9a\xe3\xcfB\x84\xa2o)\x92\xfa\xe1\x8bR6Sq\x01\x93\x8cV\xf2#!\xb2 \xdf\x00!S\x9f\xef\xf0\x05\xc6\xf9\x04\x88\\\x05\x93\x99}\x95\xde\x94f\xa6G\\\v:\xee\x80)\x87\xb9\xe0\x87}(a\x8a^e(\xe0\xfcl\xbb~\x03\x1fq\xd2\xfeD\x8a\x13\x92e\xe6\xf9\xae:&H\xa6\xd8\x8arT\x84\xa5XN4\xf2\xf9\xad\x9f\xdf\xbf<\xd7\xf6', 0x200002, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440), 0x12) socket(0xa, 0x800, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10) socket(0x18, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xffffffffffffff40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write(r6, &(0x7f0000000780)="804e45dfb905e9d374bc44b5b4757fd7885c082790891ef815de0bac6f1b834f926a1764d24c7ba70bfc85c3302b727c0f748631b13d632ebf1a7c36174d154899c39e69a335b7521613b6bd7e717c8b68743bd0952c959b98dc0dd4198997a65adc9254a2940b2e1003fa14de41d1ad14a7d8eac82f", 0x76) r7 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0x325) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000006c0)={r7, r9}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[]}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r11 = open(0x0, 0xce983fc8522842ff, 0x5c) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a8a4c0d81881ccdbe7512049c03425ab36173f9431a4731452f1db427871f403eec4b337159edbd7c977"], 0x1}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r10, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) r12 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f00000000c0)='./file0\x00') mkdirat(r12, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x161800, 0x180) renameat2(r12, &(0x7f0000000340)='./file0\x00', r0, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 21:36:16 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00w\x06S*6\xee\xa8?\xbd\xc1\b\x10s\xe3\xc76\x87\x7f\xb9\x1e-\xcex\x18k\xb9h\x9f\xe6\xe5g\xc0Q\xc8\xc5\xcb\xe7\x05\xd1A\xde\xa5\n\xcc\xfb\xa4-\xde\xa6v\xac\x9aw\x89P\xc7,\x1e\xf7\xfa\x1f\xa5\ak\xb8\xd6@n,H\x06E\xd3\fm\xe3\v\xadD\xe5\xe7\xaf\x85T\x85\x9a\xce\xcb\x8a\x01T,]\xbe\x06C|\xe8\xba\xfe5\xdaJ8\xb9[\xbbW\x9ei}Y\xfb\xb5\xc7\x97y\xf3>\x05+\t\x1f\x1bM\xdcM\xd2\x95\xd2F\xb6\xe6&\xa8\x84J\xe6\x15\x7ft\x9a\xe3\xcfB\x84\xa2o)\x92\xfa\xe1\x8bR6Sq\x01\x93\x8cV\xf2#!\xb2 \xdf\x00!S\x9f\xef\xf0\x05\xc6\xf9\x04\x88\\\x05\x93\x99}\x95\xde\x94f\xa6G\\\v:\xee\x80)\x87\xb9\xe0\x87}(a\x8a^e(\xe0\xfcl\xbb~\x03\x1fq\xd2\xfeD\x8a\x13\x92e\xe6\xf9\xae:&H\xa6\xd8\x8arT\x84\xa5XN4\xf2\xf9\xad\x9f\xdf\xbf<\xd7\xf6', 0x200002, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440), 0x12) socket(0xa, 0x800, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10) socket(0x18, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xffffffffffffff40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write(r6, &(0x7f0000000780)="804e45dfb905e9d374bc44b5b4757fd7885c082790891ef815de0bac6f1b834f926a1764d24c7ba70bfc85c3302b727c0f748631b13d632ebf1a7c36174d154899c39e69a335b7521613b6bd7e717c8b68743bd0952c959b98dc0dd4198997a65adc9254a2940b2e1003fa14de41d1ad14a7d8eac82f", 0x76) r7 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0x325) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000006c0)={r7, r9}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[]}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r11 = open(0x0, 0xce983fc8522842ff, 0x5c) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a8a4c0d81881ccdbe7512049c03425ab36173f9431a4731452f1db427871f403eec4b337159edbd7c977"], 0x1}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r10, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) r12 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f00000000c0)='./file0\x00') mkdirat(r12, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x161800, 0x180) renameat2(r12, &(0x7f0000000340)='./file0\x00', r0, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 21:36:16 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080), 0x0) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 544.776974] audit: type=1400 audit(1573508176.812:880): avc: denied { create } for pid=18931 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 545.032564] audit: type=1400 audit(1573508177.072:881): avc: denied { create } for pid=18953 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 545.184780] audit: type=1400 audit(1573508177.222:882): avc: denied { create } for pid=18941 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:17 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:17 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:17 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00w\x06S*6\xee\xa8?\xbd\xc1\b\x10s\xe3\xc76\x87\x7f\xb9\x1e-\xcex\x18k\xb9h\x9f\xe6\xe5g\xc0Q\xc8\xc5\xcb\xe7\x05\xd1A\xde\xa5\n\xcc\xfb\xa4-\xde\xa6v\xac\x9aw\x89P\xc7,\x1e\xf7\xfa\x1f\xa5\ak\xb8\xd6@n,H\x06E\xd3\fm\xe3\v\xadD\xe5\xe7\xaf\x85T\x85\x9a\xce\xcb\x8a\x01T,]\xbe\x06C|\xe8\xba\xfe5\xdaJ8\xb9[\xbbW\x9ei}Y\xfb\xb5\xc7\x97y\xf3>\x05+\t\x1f\x1bM\xdcM\xd2\x95\xd2F\xb6\xe6&\xa8\x84J\xe6\x15\x7ft\x9a\xe3\xcfB\x84\xa2o)\x92\xfa\xe1\x8bR6Sq\x01\x93\x8cV\xf2#!\xb2 \xdf\x00!S\x9f\xef\xf0\x05\xc6\xf9\x04\x88\\\x05\x93\x99}\x95\xde\x94f\xa6G\\\v:\xee\x80)\x87\xb9\xe0\x87}(a\x8a^e(\xe0\xfcl\xbb~\x03\x1fq\xd2\xfeD\x8a\x13\x92e\xe6\xf9\xae:&H\xa6\xd8\x8arT\x84\xa5XN4\xf2\xf9\xad\x9f\xdf\xbf<\xd7\xf6', 0x200002, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440), 0x12) socket(0xa, 0x800, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10) socket(0x18, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xffffffffffffff40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write(r6, &(0x7f0000000780)="804e45dfb905e9d374bc44b5b4757fd7885c082790891ef815de0bac6f1b834f926a1764d24c7ba70bfc85c3302b727c0f748631b13d632ebf1a7c36174d154899c39e69a335b7521613b6bd7e717c8b68743bd0952c959b98dc0dd4198997a65adc9254a2940b2e1003fa14de41d1ad14a7d8eac82f", 0x76) r7 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0x325) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000006c0)={r7, r9}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[]}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r11 = open(0x0, 0xce983fc8522842ff, 0x5c) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a8a4c0d81881ccdbe7512049c03425ab36173f9431a4731452f1db427871f403eec4b337159edbd7c977"], 0x1}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r10, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) r12 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f00000000c0)='./file0\x00') mkdirat(r12, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x161800, 0x180) renameat2(r12, &(0x7f0000000340)='./file0\x00', r0, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 21:36:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x10}, 0xffffff9a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r2, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x80000001) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r3, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r9}, 0x80, 0x0}}], 0x300, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="f977ac0bdee101f7c0f13f8fbcb5674a805616fbe59d8142c090b5836a143c85053b19c89beb83ad620ffe5d27de83bc6376d1a4", @ANYRES32=r9, @ANYBLOB="080003002f00000008000800ac1e010114000900fe8000000000000000000000000000aa1400070066e329c7949daacfcde122b5862fe9b0"], 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:36:18 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080), 0x0) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 546.011064] audit: type=1400 audit(1573508178.052:883): avc: denied { create } for pid=18974 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080), 0x0) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 546.501358] audit: type=1400 audit(1573508178.542:884): avc: denied { create } for pid=19012 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 546.750043] lowmemorykiller: Killing 'syz-executor.5' (10814) (tgid 10814), adj 1000, [ 546.750043] to free 52548kB on behalf of 'syz-executor.4' (18985) because [ 546.750043] cache 65260kB is below limit 65536kB for oom_score_adj 12 [ 546.750043] Free memory is -1120kB above reserved [ 546.760254] lowmemorykiller: Killing 'syz-executor.2' (18747) (tgid 18747), adj 1000, [ 546.760254] to free 52520kB on behalf of 'syz-executor.4' (18999) because [ 546.760254] cache 64964kB is below limit 65536kB for oom_score_adj 12 [ 546.760254] Free memory is 1956kB above reserved [ 546.762094] lowmemorykiller: Killing 'syz-executor.2' (18747) (tgid 18747), adj 1000, [ 546.762094] to free 52520kB on behalf of 'syz-executor.2' (19008) because [ 546.762094] cache 65112kB is below limit 65536kB for oom_score_adj 12 [ 546.762094] Free memory is -44kB above reserved [ 546.779054] lowmemorykiller: Killing 'syz-executor.2' (11236) (tgid 11236), adj 1000, [ 546.779054] to free 52516kB on behalf of 'kworker/u4:3' (19028) because [ 546.779054] cache 64668kB is below limit 65536kB for oom_score_adj 12 [ 546.779054] Free memory is 23656kB above reserved [ 546.780574] lowmemorykiller: Killing 'syz-executor.2' (11236) (tgid 11236), adj 1000, [ 546.780574] to free 52516kB on behalf of 'syz-executor.4' (18999) because [ 546.780574] cache 64520kB is below limit 65536kB for oom_score_adj 12 [ 546.780574] Free memory is 25856kB above reserved [ 546.927972] lowmemorykiller: Killing 'syz-executor.2' (11268) (tgid 11268), adj 1000, [ 546.927972] to free 52516kB on behalf of 'kswapd0' (28) because [ 546.927972] cache 64372kB is below limit 65536kB for oom_score_adj 12 [ 546.927972] Free memory is 26892kB above reserved [ 546.929984] lowmemorykiller: Killing 'syz-executor.2' (14275) (tgid 14275), adj 1000, [ 546.929984] to free 52516kB on behalf of 'syz-executor.1' (18972) because [ 546.929984] cache 64668kB is below limit 65536kB for oom_score_adj 12 [ 546.929984] Free memory is 52796kB above reserved [ 546.950032] lowmemorykiller: Killing 'syz-executor.4' (18043) (tgid 18043), adj 1000, [ 546.950032] to free 52516kB on behalf of 'syz-executor.1' (18972) because [ 546.950032] cache 64668kB is below limit 65536kB for oom_score_adj 12 [ 546.950032] Free memory is 61308kB above reserved 21:36:19 executing program 4: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) open$dir(&(0x7f0000000200)='./file0\x00', 0x27e, 0x0) 21:36:19 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:19 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:19 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c", 0x11) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x10}, 0xffffff9a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r2, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x80000001) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r3, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r9}, 0x80, 0x0}}], 0x300, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="f977ac0bdee101f7c0f13f8fbcb5674a805616fbe59d8142c090b5836a143c85053b19c89beb83ad620ffe5d27de83bc6376d1a4", @ANYRES32=r9, @ANYBLOB="080003002f00000008000800ac1e010114000900fe8000000000000000000000000000aa1400070066e329c7949daacfcde122b5862fe9b0"], 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 547.444285] audit: type=1400 audit(1573508179.482:885): avc: denied { create } for pid=19041 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080), 0x0) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c", 0x11) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:20 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:20 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 548.207698] audit_printk_skb: 3 callbacks suppressed [ 548.245668] audit: type=1400 audit(1573508180.242:887): avc: denied { create } for pid=19093 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c", 0x11) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:20 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c", 0x11) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:20 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$update(0x2, r2, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) readahead(r0, 0x2a7, 0xffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xfe) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000380)=@isdn={0x22, 0xffff, 0x9, 0xb781}, 0x80) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) recvmmsg(r4, &(0x7f0000005cc0)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}], 0x3, &(0x7f0000000500)=""/14, 0xe}, 0x401}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001600)=""/219, 0xdb}, {&(0x7f0000001700)=""/89, 0x59}, {&(0x7f0000001780)=""/42, 0x2a}, {&(0x7f00000017c0)=""/91, 0x5b}], 0x4, &(0x7f0000001880)=""/174, 0xae}, 0xff}, {{&(0x7f0000001940)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002d00)=[{&(0x7f00000019c0)=""/186, 0xba}, {&(0x7f0000001a80)=""/150, 0x96}, {&(0x7f0000001b40)=""/115, 0x73}, {&(0x7f0000005f00)=""/247, 0xf2}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/18, 0x12}], 0x6}, 0x4}, {{&(0x7f0000002d80)=@ipx, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e00)=""/157, 0xfffffffffffffc6b}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)}], 0x3, &(0x7f0000002f80)=""/176, 0xb0}, 0x6}, {{&(0x7f0000003040)=@nfc, 0x80, &(0x7f0000003140)=[{&(0x7f00000030c0)=""/128, 0x80}], 0x1, &(0x7f0000003180)=""/4096, 0x1000}, 0x700}, {{&(0x7f0000004180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004200)=""/80, 0x50}, {&(0x7f0000004280)=""/224, 0xe0}, {&(0x7f0000004380)=""/39, 0x27}, {&(0x7f00000043c0)=""/26, 0x1a}, {&(0x7f0000004400)=""/86, 0x56}], 0x5, &(0x7f0000004500)=""/166, 0xa6}}, {{0x0, 0x0, &(0x7f0000005b40), 0x9, &(0x7f0000005c00)=""/142, 0x8e}, 0x6}], 0x7, 0x3adfc5d7f462dc8a, &(0x7f0000005e80)={0x0, 0x1c9c380}) connect$inet6(r5, &(0x7f0000005ec0)={0xa, 0x4e24, 0x2, @loopback, 0x56b}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x7) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x400001, 0x0) r7 = open(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x64, 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000005c0)) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000440)) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendto$inet6(r6, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) [ 548.718232] audit: type=1400 audit(1573508180.752:888): avc: denied { create } for pid=19115 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 548.762205] audit: type=1400 audit(1573508180.802:889): avc: denied { create } for pid=19110 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:20 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0x0, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c", 0x11) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 549.120001] lowmemorykiller: Killing 'syz-executor.1' (18995) (tgid 18995), adj 1000, [ 549.120001] to free 52520kB on behalf of 'kswapd0' (28) because [ 549.120001] cache 64868kB is below limit 65536kB for oom_score_adj 12 [ 549.120001] Free memory is 1208kB above reserved 21:36:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x89331425a700af86, 0x13) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r0, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r2 = openat$cgroup_ro(r1, &(0x7f0000000600)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x114\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\xe77\xc5P\x9c\xda\xcb1\xd7\xa6\xd2-\xaa\xf2\xa9\xad@:H68\x8a\x80\x18\'R&\x1f\xb6K\xe3\x9dI(\xd4\x12\xe3\xb0\xb1\x0e@\x00Z\xea\x91!]\xd9b\xd9c$\xde\xc9~NX\xfcf5\xd8\xfa\x1d\xf9\xed\xf3\xba`\x03\x13\xe6\x1b\xe2\x87\x84f|\xca\xf08\xb8\xfd4\xb8\xec\x13\xaa08\xba\x97Ro\x0eh\xd6\x99\x85\xfe\x94\x98\xc3\x9b\xb1\xb6\xa9\x8b5\xe3\xc8\x83\x82P\x83\xa7u\xf0\x03M\xb1\xf5\xd3\x0f\xcf\x94\x98(\x1e\xa4\xde\xe8\xb3K\xa7\x91\xa5\x14\x1e\t\x8c,\xecw\xcc\xa6\xd3\xe2\x7fPI\xf2\xe5\x85L\xf2\xd18\xad\x9e\xfa\"G_^\x163\xfd\xd3\xfc\xe1\x8dd\xc8)u\xb6\xbf3\xd3\x9cJ\xcb\xb3^\xe4\x9e2\xa2\xd6/\xee\xa1\x86\a\xa3l<\xc5\xfcM\xf0\xd5\x1c\x02\xacpl\xa8\x8e9\xfd-x\xbf\x1a\xc1\x03\xfax\x7f\x89\xdd\xc31\x1eN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\xf1\xe4\xc9\xdcx\xe8}\x98\xf9zZ\xb9\xe24t#K\xfb\xc8\xd8\xd2S`v\x92\xd1\xc0y\xf6\xe9\x86\x963F\x04Vp\xeaj\xff\xb8T\xc9\xcf\x0f\xe2\xf6\x05W`\x18\xaf{\xb4\xc6\xa2R\xce1\xf6j\t`V\x15\x1de4\xfd5\xb1\xd4\\\xcb\'\xb2N\xee\x9e!Z\x18\xe3\xd1\xab\xaf\x91\x97\xc54\xd6\xecd\x96(~\tF\x19LL\xf7+\x10\xfa\xf0P\xbc\xb1_\x84x\x10%\x11\x14\x15d\xe5)\f\xed\x8d\xf8\xa2\xf1\x9b8\x18u~~!\x89m\xb6>\'\xd1\xf8\xe8Z{v\xda\xccJA*\x18\xe4=\x89\xa2\x05-\x9d\x97\x85!o)\xf5\r\xf0\x15', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RXATTRCREATE(r5, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYPTR], 0x8) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$setownex(r6, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) read(r2, 0x0, 0x0) [ 549.245062] audit: type=1400 audit(1573508181.282:890): avc: denied { create } for pid=19136 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_setup(0x4, &(0x7f0000000000)=0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = fcntl$dupfd(r5, 0x406, r6) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r9 = accept4$unix(r8, &(0x7f0000001380), &(0x7f0000001400)=0x6e, 0x800) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r10, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r11 = socket$inet(0x2, 0x5608ff0f9ffc0fef, 0x7) r12 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r12, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r13 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002580)='/selinux/context\x00', 0x2, 0x0) r14 = eventfd2(0x8, 0x801) io_submit(r3, 0x7, &(0x7f0000002780)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7, r2, &(0x7f00000000c0)="ffe966eb2a52aa85afffe82d0cbfc86ef82f2cdac1b7ccc45ebbc52285fef3f074dea56db5b3a2a6f4c6c35be7d0bfd9a9bfba2af0ce5b79bb390ffabacde8b5cf1e6d0bf0d74ebc53fc2245ebcc38f4538f770f60ff8edd55a6be19642a23dfbe7ed934015615e6c5fb66dbc6cfb586b773b6a46cb2d2cdbae230229708d068607ec6c14a0c2efa3af593cc255a116b96a360b267aee04d2755bcebc8b4905b15a37ed18268556b56225c81b1fd", 0xae, 0x1, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x1, r4, &(0x7f00000002c0)="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", 0x1000, 0x6aa, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f00000012c0)="f80c1277ca5a7615b38235571e10340f930f62502ea34df84eb90f2b7b277d1a350f46942d92bf91d5338065bb21150be3c11c84f3d782dfc72a58ef545f8e46c8f2aac2cf6fb983249393b6a6a163c79b033c21f987a6ab53dccace09d29ba573a49f88a1f261cd1754b7f951f0872d9515e67826157d66cb3aa6d1cdc811efc6f96d1aa1c314e86a664aea5dbcd47bd94178f8c1e8f645294eaa661c51df8a6e0400", 0xa3, 0x80000001, 0x0, 0x3, r7}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x5, 0x4, r9, &(0x7f0000001440)="19e8810bfc2239e6dd6e135caddc0c148adca68ef0690ed1393c6c883a31ed26653e47d32180c37bb2dd9d2f614849fb88ce7ee30b28e3117b02dc3f1559db5c3c67e73176a80db1e52ba697e306109ff942eb8cb6c193f7fd75ac6d0d321132942060766883a9f162f4b16b84cd5326c6f5083bc3235dfd4948fb8ea8834206104743b8bfe83136be4ab7044f124491f42c", 0x92, 0x7, 0x0, 0x2, r10}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x1b, 0x8001, r11, &(0x7f0000001540)="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", 0x1000, 0x9, 0x0, 0x2, r12}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1f8c9deb0ede7d52, 0x3, r13, &(0x7f00000025c0)="485bc598a240fc72e2ceeccc75f4fbd5daa803925f2d9edcc50bf812b4189a923f3ea1e88baa9b4b2fa8c2554396e106d7d660c10871fd2f9831a96ff58137b7f39dd5e54d5c019ebaa9312afde6db7c167eac6397ef29c59b0741a33cd86be246dfa643afdb3ccd7c379a918470f4055b52f4ee66219d8268675bab016bddce2a5041098e075bb4e7ab77737b3a45ce7ca3be55a351743080d328cd978fdc64773239410741a86bb2fcdf0fe1616e374e66459afcb97eed2b24610b682f60884bfa112144563f38da9eedfd7598d653b7f0aad442beb7f1fd662b673cbae1e033fc25", 0xe3, 0x0, 0x0, 0x1, r2}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x7, 0x7, r14, &(0x7f0000002700)="62700db8634514f87d3970c279de95142db6e851", 0x14, 0xffffffff, 0x0, 0x1, r2}]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r15 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r16 = socket$inet6(0xa, 0x400000000001, 0x0) close(r16) r17 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x200005) sendfile(r16, r17, 0x0, 0x8000ffffffff) r18 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r15, r18, 0x0, 0x8000fffffffe) 21:36:21 executing program 4: r0 = memfd_create(&(0x7f0000000500)='cgroup\\\x13\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') fchdir(r1) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2084080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfa9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048881}, 0x40000) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1/file1\x00') [ 549.487748] lowmemorykiller: Killing 'syz-executor.4' (18120) (tgid 18120), adj 1000, [ 549.487748] to free 52516kB on behalf of 'kswapd0' (28) because [ 549.487748] cache 64772kB is below limit 65536kB for oom_score_adj 12 [ 549.487748] Free memory is 1324kB above reserved [ 549.509142] audit: type=1400 audit(1573508181.542:891): avc: denied { create } for pid=19154 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 549.557121] audit: type=1400 audit(1573508181.592:892): avc: denied { create } for pid=19154 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/205, &(0x7f0000000000)=0xcd) 21:36:21 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0x0, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 549.762744] lowmemorykiller: Killing 'syz-executor.1' (18444) (tgid 18444), adj 1000, [ 549.762744] to free 52516kB on behalf of 'kswapd0' (28) because [ 549.762744] cache 64180kB is below limit 65536kB for oom_score_adj 12 [ 549.762744] Free memory is 21476kB above reserved 21:36:22 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) signalfd(r4, &(0x7f0000000000), 0x8) linkat(r3, &(0x7f0000000080)='./bus\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) finit_module(r4, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) write(r3, &(0x7f0000000400)="ff38ffd7356ea9c8e8d66d78698115307e35be8b7b9c298bfe9478ef1685be5c03031c6551a9511ec9bce4c73f8a7597cca9ef685a6fd70eb6e040e481a0e3b2a4a78e48dea91fe541244968a3a886f2d8ff8db24792eadca8992182e5057fec32eeac706b327beaf4a14e0bf29c34fe102b492f64e60d704baa43a3c80d0000f328c244daf8791bc85229793bcb4d3d4ade369bc6fb2b41ef5c49ca30adfc0ca9667e079fd64b9b117b00f76124ba509db0935cd699d12353a9475790486e5afabd4bc3b7", 0xfffffdf4) stat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)) accept4$unix(r1, 0x0, &(0x7f0000000100), 0x800) 21:36:22 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1b4011, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000340)='\x00\x00\a\x00\x00\x00\x90E\n;\xa1NHy\xc1\x10\x00\x00\xe1iryL]2\xb9\xca\xb8\x9c\xcf\'\xf2<\xf2@=\xf2_E\x9b8\x93\xee\x05\xd4e\xa4\xcc\x88\xd0\xea\xd9f3\x9b;_H\x9cQ\xd4\xbf\x88cR\x86\xfa\n\x01$q\xff+>\xac\x1d\x0f3U$U\xc5q\x00Tj\x94\xf7>\x164\x9f\xde&\xe8\x80\x88c\xdf\xa8V\x02\xa8\x05\xd4\xcc\xbe8\xb6\xf4\x01!\xb4\x8f$\"l`\xbe\x1e\x052\xe2\xbe\xb2\xccQ\x84\xcdB\xb8\xddJ7nc\xd04`\x92\x84\xb9\xecy\xcd\xc2\xc1C!$` \xaa\x0e[\x06\xcf\xed\xd1(uJ\xa4\xbb\rHz\x134\x99\x85TQE\xe0\xc10x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000077c0)=[{{&(0x7f0000005000)=@tipc=@id, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005080)=""/103, 0x67}, {&(0x7f0000005100)=""/131, 0x83}, {&(0x7f00000051c0)=""/38, 0x26}, {&(0x7f0000005200)=""/131, 0x83}], 0x4}, 0x8}, {{&(0x7f0000005300)=@xdp, 0x80, &(0x7f0000005540)=[{&(0x7f0000005380)}, {&(0x7f00000053c0)=""/159, 0x9f}, {&(0x7f0000005480)=""/188, 0xbc}], 0x3, &(0x7f0000005580)=""/214, 0xd6}, 0x80000000}, {{&(0x7f0000005680)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005700)=""/158, 0x9e}, {&(0x7f00000057c0)=""/196, 0xc4}, {&(0x7f00000058c0)=""/113, 0x71}, {&(0x7f0000005940)=""/178, 0xb2}, {&(0x7f0000005a00)=""/188, 0xbc}, {&(0x7f0000005ac0)=""/201, 0xc9}, {&(0x7f0000005bc0)=""/94, 0x5e}, {&(0x7f0000005c40)=""/100, 0x64}], 0x8, &(0x7f0000005d40)=""/57, 0x39}, 0x1}, {{&(0x7f0000005d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005e00)=""/55, 0x37}, {&(0x7f0000005e40)=""/57, 0x39}], 0x2, &(0x7f0000005ec0)=""/70, 0x46}, 0x5}, {{&(0x7f0000005f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000006300)=[{&(0x7f0000005fc0)=""/46, 0x2e}, {&(0x7f0000006000)=""/250, 0xfa}, {&(0x7f0000006100)=""/226, 0xe2}, {&(0x7f0000006200)=""/217, 0xd9}], 0x4}, 0x4}, {{&(0x7f0000006340)=@ipx, 0x80, &(0x7f0000006540)=[{&(0x7f00000063c0)=""/225, 0xe1}, {&(0x7f00000064c0)=""/86, 0x56}], 0x2}, 0x10000}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006580)=""/70, 0x46}, {&(0x7f0000006600)=""/156, 0x9c}, {&(0x7f00000066c0)=""/130, 0x82}], 0x3, &(0x7f00000067c0)=""/4096, 0x1000}, 0x8}], 0x7, 0x40000100, &(0x7f00000079c0)={r3, r4+30000000}) r6 = syz_open_procfs(0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004041) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r7, 0x308, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004012}, 0x4005) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000007ac0)={&(0x7f0000007a00)={0x10, 0x0, 0x0, 0xbe109200}, 0xc, &(0x7f0000007a80)={&(0x7f0000007a40)={0x20, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000051) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x80000000) [ 550.192599] audit: type=1400 audit(1573508182.232:893): avc: denied { create } for pid=19179 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:22 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$update(0x2, r2, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) readahead(r0, 0x2a7, 0xffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xfe) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000380)=@isdn={0x22, 0xffff, 0x9, 0xb781}, 0x80) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) recvmmsg(r4, &(0x7f0000005cc0)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}], 0x3, &(0x7f0000000500)=""/14, 0xe}, 0x401}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001600)=""/219, 0xdb}, {&(0x7f0000001700)=""/89, 0x59}, {&(0x7f0000001780)=""/42, 0x2a}, {&(0x7f00000017c0)=""/91, 0x5b}], 0x4, &(0x7f0000001880)=""/174, 0xae}, 0xff}, {{&(0x7f0000001940)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002d00)=[{&(0x7f00000019c0)=""/186, 0xba}, {&(0x7f0000001a80)=""/150, 0x96}, {&(0x7f0000001b40)=""/115, 0x73}, {&(0x7f0000005f00)=""/247, 0xf2}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/18, 0x12}], 0x6}, 0x4}, {{&(0x7f0000002d80)=@ipx, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e00)=""/157, 0xfffffffffffffc6b}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)}], 0x3, &(0x7f0000002f80)=""/176, 0xb0}, 0x6}, {{&(0x7f0000003040)=@nfc, 0x80, &(0x7f0000003140)=[{&(0x7f00000030c0)=""/128, 0x80}], 0x1, &(0x7f0000003180)=""/4096, 0x1000}, 0x700}, {{&(0x7f0000004180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004200)=""/80, 0x50}, {&(0x7f0000004280)=""/224, 0xe0}, {&(0x7f0000004380)=""/39, 0x27}, {&(0x7f00000043c0)=""/26, 0x1a}, {&(0x7f0000004400)=""/86, 0x56}], 0x5, &(0x7f0000004500)=""/166, 0xa6}}, {{0x0, 0x0, &(0x7f0000005b40), 0x9, &(0x7f0000005c00)=""/142, 0x8e}, 0x6}], 0x7, 0x3adfc5d7f462dc8a, &(0x7f0000005e80)={0x0, 0x1c9c380}) connect$inet6(r5, &(0x7f0000005ec0)={0xa, 0x4e24, 0x2, @loopback, 0x56b}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x7) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x400001, 0x0) r7 = open(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x64, 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000005c0)) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000440)) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendto$inet6(r6, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) [ 550.420165] audit: type=1400 audit(1573508182.452:894): avc: denied { create } for pid=19192 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:22 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0x0, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 550.629405] audit: type=1400 audit(1573508182.662:895): avc: denied { create } for pid=19192 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_setup(0x4, &(0x7f0000000000)=0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = fcntl$dupfd(r5, 0x406, r6) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r9 = accept4$unix(r8, &(0x7f0000001380), &(0x7f0000001400)=0x6e, 0x800) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r10, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r11 = socket$inet(0x2, 0x5608ff0f9ffc0fef, 0x7) r12 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r12, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r13 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002580)='/selinux/context\x00', 0x2, 0x0) r14 = eventfd2(0x8, 0x801) io_submit(r3, 0x7, &(0x7f0000002780)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7, r2, &(0x7f00000000c0)="ffe966eb2a52aa85afffe82d0cbfc86ef82f2cdac1b7ccc45ebbc52285fef3f074dea56db5b3a2a6f4c6c35be7d0bfd9a9bfba2af0ce5b79bb390ffabacde8b5cf1e6d0bf0d74ebc53fc2245ebcc38f4538f770f60ff8edd55a6be19642a23dfbe7ed934015615e6c5fb66dbc6cfb586b773b6a46cb2d2cdbae230229708d068607ec6c14a0c2efa3af593cc255a116b96a360b267aee04d2755bcebc8b4905b15a37ed18268556b56225c81b1fd", 0xae, 0x1, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x1, r4, &(0x7f00000002c0)="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", 0x1000, 0x6aa, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f00000012c0)="f80c1277ca5a7615b38235571e10340f930f62502ea34df84eb90f2b7b277d1a350f46942d92bf91d5338065bb21150be3c11c84f3d782dfc72a58ef545f8e46c8f2aac2cf6fb983249393b6a6a163c79b033c21f987a6ab53dccace09d29ba573a49f88a1f261cd1754b7f951f0872d9515e67826157d66cb3aa6d1cdc811efc6f96d1aa1c314e86a664aea5dbcd47bd94178f8c1e8f645294eaa661c51df8a6e0400", 0xa3, 0x80000001, 0x0, 0x3, r7}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x5, 0x4, r9, &(0x7f0000001440)="19e8810bfc2239e6dd6e135caddc0c148adca68ef0690ed1393c6c883a31ed26653e47d32180c37bb2dd9d2f614849fb88ce7ee30b28e3117b02dc3f1559db5c3c67e73176a80db1e52ba697e306109ff942eb8cb6c193f7fd75ac6d0d321132942060766883a9f162f4b16b84cd5326c6f5083bc3235dfd4948fb8ea8834206104743b8bfe83136be4ab7044f124491f42c", 0x92, 0x7, 0x0, 0x2, r10}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x1b, 0x8001, r11, &(0x7f0000001540)="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", 0x1000, 0x9, 0x0, 0x2, r12}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1f8c9deb0ede7d52, 0x3, r13, &(0x7f00000025c0)="485bc598a240fc72e2ceeccc75f4fbd5daa803925f2d9edcc50bf812b4189a923f3ea1e88baa9b4b2fa8c2554396e106d7d660c10871fd2f9831a96ff58137b7f39dd5e54d5c019ebaa9312afde6db7c167eac6397ef29c59b0741a33cd86be246dfa643afdb3ccd7c379a918470f4055b52f4ee66219d8268675bab016bddce2a5041098e075bb4e7ab77737b3a45ce7ca3be55a351743080d328cd978fdc64773239410741a86bb2fcdf0fe1616e374e66459afcb97eed2b24610b682f60884bfa112144563f38da9eedfd7598d653b7f0aad442beb7f1fd662b673cbae1e033fc25", 0xe3, 0x0, 0x0, 0x1, r2}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x7, 0x7, r14, &(0x7f0000002700)="62700db8634514f87d3970c279de95142db6e851", 0x14, 0xffffffff, 0x0, 0x1, r2}]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r15 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r16 = socket$inet6(0xa, 0x400000000001, 0x0) close(r16) r17 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x200005) sendfile(r16, r17, 0x0, 0x8000ffffffff) r18 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r15, r18, 0x0, 0x8000fffffffe) 21:36:22 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1b4011, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000340)='\x00\x00\a\x00\x00\x00\x90E\n;\xa1NHy\xc1\x10\x00\x00\xe1iryL]2\xb9\xca\xb8\x9c\xcf\'\xf2<\xf2@=\xf2_E\x9b8\x93\xee\x05\xd4e\xa4\xcc\x88\xd0\xea\xd9f3\x9b;_H\x9cQ\xd4\xbf\x88cR\x86\xfa\n\x01$q\xff+>\xac\x1d\x0f3U$U\xc5q\x00Tj\x94\xf7>\x164\x9f\xde&\xe8\x80\x88c\xdf\xa8V\x02\xa8\x05\xd4\xcc\xbe8\xb6\xf4\x01!\xb4\x8f$\"l`\xbe\x1e\x052\xe2\xbe\xb2\xccQ\x84\xcdB\xb8\xddJ7nc\xd04`\x92\x84\xb9\xecy\xcd\xc2\xc1C!$` \xaa\x0e[\x06\xcf\xed\xd1(uJ\xa4\xbb\rHz\x134\x99\x85TQE\xe0\xc10x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000077c0)=[{{&(0x7f0000005000)=@tipc=@id, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005080)=""/103, 0x67}, {&(0x7f0000005100)=""/131, 0x83}, {&(0x7f00000051c0)=""/38, 0x26}, {&(0x7f0000005200)=""/131, 0x83}], 0x4}, 0x8}, {{&(0x7f0000005300)=@xdp, 0x80, &(0x7f0000005540)=[{&(0x7f0000005380)}, {&(0x7f00000053c0)=""/159, 0x9f}, {&(0x7f0000005480)=""/188, 0xbc}], 0x3, &(0x7f0000005580)=""/214, 0xd6}, 0x80000000}, {{&(0x7f0000005680)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005700)=""/158, 0x9e}, {&(0x7f00000057c0)=""/196, 0xc4}, {&(0x7f00000058c0)=""/113, 0x71}, {&(0x7f0000005940)=""/178, 0xb2}, {&(0x7f0000005a00)=""/188, 0xbc}, {&(0x7f0000005ac0)=""/201, 0xc9}, {&(0x7f0000005bc0)=""/94, 0x5e}, {&(0x7f0000005c40)=""/100, 0x64}], 0x8, &(0x7f0000005d40)=""/57, 0x39}, 0x1}, {{&(0x7f0000005d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005e00)=""/55, 0x37}, {&(0x7f0000005e40)=""/57, 0x39}], 0x2, &(0x7f0000005ec0)=""/70, 0x46}, 0x5}, {{&(0x7f0000005f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000006300)=[{&(0x7f0000005fc0)=""/46, 0x2e}, {&(0x7f0000006000)=""/250, 0xfa}, {&(0x7f0000006100)=""/226, 0xe2}, {&(0x7f0000006200)=""/217, 0xd9}], 0x4}, 0x4}, {{&(0x7f0000006340)=@ipx, 0x80, &(0x7f0000006540)=[{&(0x7f00000063c0)=""/225, 0xe1}, {&(0x7f00000064c0)=""/86, 0x56}], 0x2}, 0x10000}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006580)=""/70, 0x46}, {&(0x7f0000006600)=""/156, 0x9c}, {&(0x7f00000066c0)=""/130, 0x82}], 0x3, &(0x7f00000067c0)=""/4096, 0x1000}, 0x8}], 0x7, 0x40000100, &(0x7f00000079c0)={r3, r4+30000000}) r6 = syz_open_procfs(0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004041) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r7, 0x308, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004012}, 0x4005) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000007ac0)={&(0x7f0000007a00)={0x10, 0x0, 0x0, 0xbe109200}, 0xc, &(0x7f0000007a80)={&(0x7f0000007a40)={0x20, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000051) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x80000000) 21:36:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:22 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) signalfd(r4, &(0x7f0000000000), 0x8) linkat(r3, &(0x7f0000000080)='./bus\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) finit_module(r4, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) write(r3, &(0x7f0000000400)="ff38ffd7356ea9c8e8d66d78698115307e35be8b7b9c298bfe9478ef1685be5c03031c6551a9511ec9bce4c73f8a7597cca9ef685a6fd70eb6e040e481a0e3b2a4a78e48dea91fe541244968a3a886f2d8ff8db24792eadca8992182e5057fec32eeac706b327beaf4a14e0bf29c34fe102b492f64e60d704baa43a3c80d0000f328c244daf8791bc85229793bcb4d3d4ade369bc6fb2b41ef5c49ca30adfc0ca9667e079fd64b9b117b00f76124ba509db0935cd699d12353a9475790486e5afabd4bc3b7", 0xfffffdf4) stat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)) accept4$unix(r1, 0x0, &(0x7f0000000100), 0x800) [ 550.967867] audit: type=1400 audit(1573508183.002:896): avc: denied { create } for pid=19214 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 551.105519] [ 551.107205] ================================= [ 551.111692] [ INFO: inconsistent lock state ] [ 551.116187] 4.4.174+ #4 Not tainted [ 551.119801] --------------------------------- [ 551.124288] inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-W} usage. [ 551.130946] kswapd0/28 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 551.136229] (&sb->s_type->i_mutex_key#10){+.+.?.}, at: [] shmem_fallocate+0x13b/0x9c0 [ 551.146522] {RECLAIM_FS-ON-W} state was registered at: [ 551.151787] [] mark_held_locks+0xb1/0x100 [ 551.157815] [] lockdep_trace_alloc+0x18c/0x2b0 [ 551.164272] [] __alloc_pages_nodemask+0x13a/0x14b0 [ 551.171071] [] shmem_getpage_gfp+0x6a3/0x1120 [ 551.177438] [] shmem_write_begin+0xeb/0x190 [ 551.183619] [] generic_perform_write+0x281/0x540 [ 551.190415] [] __generic_file_write_iter+0x350/0x540 [ 551.197362] [] generic_file_write_iter+0x3aa/0x740 [ 551.204216] [] __vfs_write+0x2e8/0x3d0 [ 551.209962] [] vfs_write+0x182/0x4e0 [ 551.215514] [] SyS_write+0xdc/0x1c0 [ 551.220978] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 551.227752] irq event stamp: 156677 [ 551.231355] hardirqs last enabled at (156677): [] mutex_trylock+0x28d/0x500 [ 551.240211] hardirqs last disabled at (156676): [] mutex_trylock+0xaf/0x500 [ 551.248994] softirqs last enabled at (155248): [] __do_softirq+0x4da/0xa3f [ 551.257759] softirqs last disabled at (155245): [] irq_exit+0x10a/0x150 [ 551.266176] [ 551.266176] other info that might help us debug this: [ 551.272829] Possible unsafe locking scenario: [ 551.272829] [ 551.278969] CPU0 [ 551.281527] ---- [ 551.284084] lock(&sb->s_type->i_mutex_key#10); [ 551.289190] [ 551.291924] lock(&sb->s_type->i_mutex_key#10); [ 551.297210] [ 551.297210] *** DEADLOCK *** [ 551.297210] [ 551.303245] 2 locks held by kswapd0/28: [ 551.307192] #0: (shrinker_rwsem){++++..}, at: [] shrink_slab.part.0+0xb2/0xb30 [ 551.316913] #1: (ashmem_mutex){+.+.+.}, at: [] ashmem_shrink_scan+0x56/0x4c0 [ 551.326531] [ 551.326531] stack backtrace: [ 551.331009] CPU: 1 PID: 28 Comm: kswapd0 Not tainted 4.4.174+ #4 [ 551.337132] 0000000000000000 3b57279cadc077b4 ffff8800bba6f290 ffffffff81aad1a1 [ 551.345134] 00000000000000f0 ffff8800bba60000 ffffffff83abf7d0 ffffffff84057a80 [ 551.353247] ffff8800bba60938 ffff8800bba6f308 ffffffff813ad456 0000000000000000 [ 551.361278] Call Trace: [ 551.363846] [] dump_stack+0xc1/0x120 [ 551.369190] [] print_usage_bug.cold+0x454/0x592 [ 551.375488] [] ? save_stack_trace+0x26/0x50 [ 551.381441] [] mark_lock+0x6fd/0x1440 [ 551.386871] [] ? debug_object_active_state+0x380/0x380 [ 551.393776] [] ? print_irq_inversion_bug+0x110/0x110 [ 551.400506] [] __lock_acquire+0xa27/0x4f50 [ 551.406370] [] ? free_hot_cold_page+0x39f/0x580 [ 551.412665] [] ? trace_hardirqs_on+0x10/0x10 [ 551.418702] [] ? free_hot_cold_page_list+0xa2/0x3c0 [ 551.425349] [] ? try_to_unmap_flush+0x53/0x590 [ 551.431559] [] lock_acquire+0x15e/0x450 [ 551.437162] [] ? shmem_fallocate+0x13b/0x9c0 [ 551.443196] [] ? shmem_fallocate+0x13b/0x9c0 [ 551.449233] [] mutex_lock_nested+0xc1/0xb80 [ 551.455204] [] ? shmem_fallocate+0x13b/0x9c0 [ 551.461240] [] ? putback_lru_page+0xe0/0xe0 [ 551.467200] [] ? check_preemption_disabled+0x3c/0x200 [ 551.474014] [] ? assoc_array_gc+0x1230/0x12e0 [ 551.480136] [] ? check_preemption_disabled+0x3c/0x200 [ 551.486954] [] ? check_preemption_disabled+0x3c/0x200 [ 551.493770] [] ? check_preemption_disabled+0x3c/0x200 [ 551.500599] [] ? check_preemption_disabled+0x3c/0x200 [ 551.507418] [] ? mutex_trylock+0x500/0x500 [ 551.513282] [] shmem_fallocate+0x13b/0x9c0 [ 551.519142] [] ? shmem_setattr+0x6b0/0x6b0 [ 551.525003] [] ? trace_hardirqs_on+0x10/0x10 [ 551.531053] [] ? trace_hardirqs_on+0x10/0x10 [ 551.537087] [] ? mark_held_locks+0xb1/0x100 [ 551.543035] [] ? ashmem_shrink_scan+0x56/0x4c0 [ 551.549243] [] ? mutex_trylock+0x28d/0x500 [ 551.555106] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 551.561925] [] ? trace_hardirqs_on+0xd/0x10 [ 551.567871] [] ? ashmem_shrink_scan+0x56/0x4c0 [ 551.574078] [] ? ion_heap_shrink_count+0x24/0x110 [ 551.580549] [] ashmem_shrink_scan+0x1c3/0x4c0 [ 551.586686] [] shrink_slab.part.0+0x402/0xb30 [ 551.592811] [] ? unregister_shrinker+0x230/0x230 [ 551.599204] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 551.606022] [] shrink_zone+0x4bc/0x610 [ 551.611538] [] ? shrink_lruvec+0x1560/0x1560 [ 551.617575] [] ? pgdat_balanced+0x265/0x310 [ 551.623521] [] kswapd+0xaaf/0x1c60 [ 551.628699] [] ? try_to_free_pages+0x1260/0x1260 [ 551.635080] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 551.641391] [] ? finish_task_switch+0x1e1/0x660 [ 551.647692] [] ? finish_task_switch+0x1b3/0x660 [ 551.653988] [] ? autoremove_wake_function.part.0+0x130/0x130 [ 551.661414] [] ? __schedule+0x7e3/0x1ee0 [ 551.667121] [] ? __kthread_parkme+0x164/0x230 [ 551.673243] [] ? try_to_free_pages+0x1260/0x1260 [ 551.679814] [] kthread+0x273/0x310 [ 551.684981] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 551.691627] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 551.697925] [] ? finish_task_switch+0x1e1/0x660 [ 551.704235] [] ? finish_task_switch+0x1b3/0x660 [ 551.710545] [] ? __schedule+0x7af/0x1ee0 [ 551.716235] [] ? __schedule+0x7a3/0x1ee0 [ 551.721938] [] ? __schedule+0x7af/0x1ee0 [ 551.727629] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 551.734275] [] ret_from_fork+0x55/0x80 [ 551.739789] [] ? kthread_create_on_node+0x4c0/0x4c0 21:36:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:24 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x0, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 552.199229] lowmemorykiller: Killing 'syz-executor.1' (18936) (tgid 18936), adj 1000, [ 552.199229] to free 52516kB on behalf of 'kswapd0' (28) because [ 552.199229] cache 53920kB is below limit 65536kB for oom_score_adj 12 [ 552.199229] Free memory is -920kB above reserved 21:36:24 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) signalfd(r4, &(0x7f0000000000), 0x8) linkat(r3, &(0x7f0000000080)='./bus\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) finit_module(r4, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) write(r3, &(0x7f0000000400)="ff38ffd7356ea9c8e8d66d78698115307e35be8b7b9c298bfe9478ef1685be5c03031c6551a9511ec9bce4c73f8a7597cca9ef685a6fd70eb6e040e481a0e3b2a4a78e48dea91fe541244968a3a886f2d8ff8db24792eadca8992182e5057fec32eeac706b327beaf4a14e0bf29c34fe102b492f64e60d704baa43a3c80d0000f328c244daf8791bc85229793bcb4d3d4ade369bc6fb2b41ef5c49ca30adfc0ca9667e079fd64b9b117b00f76124ba509db0935cd699d12353a9475790486e5afabd4bc3b7", 0xfffffdf4) stat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)) accept4$unix(r1, 0x0, &(0x7f0000000100), 0x800) 21:36:24 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0x0, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:24 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x0, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95", 0x1e) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:25 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x0, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:25 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x0, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 553.514796] lowmemorykiller: Killing 'syz-executor.2' (10822) (tgid 10822), adj 1000, [ 553.514796] to free 52512kB on behalf of 'kswapd0' (28) because [ 553.514796] cache 65120kB is below limit 65536kB for oom_score_adj 12 [ 553.514796] Free memory is 1360kB above reserved [ 553.560503] lowmemorykiller: Killing 'syz-executor.2' (13062) (tgid 13062), adj 1000, [ 553.560503] to free 52512kB on behalf of 'kswapd0' (28) because [ 553.560503] cache 65120kB is below limit 65536kB for oom_score_adj 12 [ 553.560503] Free memory is 16920kB above reserved [ 553.591320] lowmemorykiller: Killing 'syz-executor.2' (13754) (tgid 13754), adj 1000, [ 553.591320] to free 52512kB on behalf of 'kswapd0' (28) because [ 553.591320] cache 65124kB is below limit 65536kB for oom_score_adj 12 21:36:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95", 0x1e) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 553.591320] Free memory is 23128kB above reserved [ 553.619041] lowmemorykiller: Killing 'syz-executor.2' (14927) (tgid 14927), adj 1000, [ 553.619041] to free 52512kB on behalf of 'kswapd0' (28) because [ 553.619041] cache 65124kB is below limit 65536kB for oom_score_adj 12 [ 553.619041] Free memory is 38504kB above reserved [ 553.656203] lowmemorykiller: Killing 'syz-executor.2' (16608) (tgid 16608), adj 1000, 21:36:25 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x0, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 553.656203] to free 52512kB on behalf of 'kswapd0' (28) because [ 553.656203] cache 65124kB is below limit 65536kB for oom_score_adj 12 [ 553.656203] Free memory is 52532kB above reserved 21:36:25 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 553.761118] audit_printk_skb: 24 callbacks suppressed [ 553.766537] audit: type=1400 audit(1573508185.802:905): avc: denied { create } for pid=19331 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 554.002422] audit: type=1400 audit(1573508186.042:906): avc: denied { create } for pid=19344 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:26 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 21:36:26 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x0, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 554.140273] audit: type=1400 audit(1573508186.172:907): avc: denied { create } for pid=19355 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 554.287172] audit: type=1400 audit(1573508186.322:908): avc: denied { create } for pid=19362 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95", 0x1e) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 554.472234] lowmemorykiller: Killing 'syz-executor.2' (16707) (tgid 16707), adj 1000, [ 554.472234] to free 52512kB on behalf of 'kswapd0' (28) because [ 554.472234] cache 65128kB is below limit 65536kB for oom_score_adj 12 [ 554.472234] Free memory is 1348kB above reserved 21:36:26 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x0, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) [ 554.527537] lowmemorykiller: Killing 'syz-executor.4' (11483) (tgid 11483), adj 1000, [ 554.527537] to free 52508kB on behalf of 'kswapd0' (28) because [ 554.527537] cache 65132kB is below limit 65536kB for oom_score_adj 12 [ 554.527537] Free memory is 10960kB above reserved 21:36:26 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r22, r20, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 554.577997] lowmemorykiller: Killing 'syz-executor.4' (11671) (tgid 11671), adj 1000, [ 554.577997] to free 52508kB on behalf of 'kswapd0' (28) because [ 554.577997] cache 65132kB is below limit 65536kB for oom_score_adj 12 [ 554.577997] Free memory is 25840kB above reserved [ 554.640707] lowmemorykiller: Killing 'syz-executor.4' (12203) (tgid 12203), adj 1000, [ 554.640707] to free 52508kB on behalf of 'kswapd0' (28) because [ 554.640707] cache 65132kB is below limit 65536kB for oom_score_adj 12 [ 554.640707] Free memory is 42224kB above reserved [ 554.669832] lowmemorykiller: Killing 'syz-executor.4' (12295) (tgid 12295), adj 1000, [ 554.669832] to free 52508kB on behalf of 'kswapd0' (28) because [ 554.669832] cache 65132kB is below limit 65536kB for oom_score_adj 12 21:36:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 554.669832] Free memory is 58204kB above reserved 21:36:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 554.775402] audit: type=1400 audit(1573508186.812:909): avc: denied { create } for pid=19384 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 554.866791] audit: type=1400 audit(1573508186.902:910): avc: denied { create } for pid=19398 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:27 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x0, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) [ 554.996626] audit: type=1400 audit(1573508187.032:911): avc: denied { create } for pid=19408 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:27 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 555.111825] audit: type=1400 audit(1573508187.152:912): avc: denied { create } for pid=19417 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c", 0x20) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 21:36:27 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 555.415748] audit: type=1400 audit(1573508187.452:913): avc: denied { create } for pid=19438 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) 21:36:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) [ 555.645562] audit: type=1400 audit(1573508187.682:914): avc: denied { create } for pid=19449 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 21:36:27 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) dup3(r6, r5, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r11 = socket$inet(0x2, 0x80000, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000001a40)={{0x2, 0x2, @multicast2}, {0x0, @broadcast}, 0x6, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r11, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r21, r19, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 21:36:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0xff5e}], 0x0, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r2, 0x0, 0x80005) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1", 0x1a) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341d385e52b724b7800000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e5587a647ecd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) 21:36:27 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x0, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@mcast2}, 0x14) openat$smack_thread_