[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 11.643908] random: crng init done [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.97' (ECDSA) to the list of known hosts. 2019/11/24 12:46:49 fuzzer started 2019/11/24 12:46:51 dialing manager at 10.128.0.26:43175 2019/11/24 12:46:51 syscalls: 1402 2019/11/24 12:46:51 code coverage: enabled 2019/11/24 12:46:51 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/11/24 12:46:51 extra coverage: extra coverage is not supported by the kernel 2019/11/24 12:46:51 setuid sandbox: enabled 2019/11/24 12:46:51 namespace sandbox: enabled 2019/11/24 12:46:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/24 12:46:51 fault injection: kernel does not have systematic fault injection support 2019/11/24 12:46:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/24 12:46:51 net packet injection: enabled 2019/11/24 12:46:51 net device setup: enabled 2019/11/24 12:46:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/24 12:46:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:47:58 executing program 0: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24001}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x14}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd659}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2c}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000888}, 0x4041000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x401}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000380)={0x0, 0x100, 0x1, 0xd7e, 0x401, 0x4}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000400)=@req={0x28, &(0x7f00000003c0)={'veth1_to_hsr\x00', @ifru_flags=0x800}}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x20200, 0x0) ioctl$RTC_WIE_ON(r4, 0x700f) r5 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x4e5bc61bfc77cf36, 0x3b96392c42ec9b7e) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000004c0)={0x1, 0x5, [@empty, @remote, @dev={[], 0x23}, @random="23780a65dd4b", @dev={[], 0x1d}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={&(0x7f0000000500), 0xc, &(0x7f0000000740)={&(0x7f0000000540)=@newqdisc={0x1d0, 0x24, 0x20a, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0xd, 0xfffb}, {0xc, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x54, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x12e}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x1ff}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_blackhole={0x10, 0x1, 'blackhole\x00'}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff9}, @TCA_STAB={0x10c, 0x8, [{{0x1c, 0x1, {0x6, 0x9, 0xfffe, 0x5, 0xfa24677dd283020b, 0xffffff81, 0x8001, 0x2}}, {0x8, 0x2, [0x925b, 0x4]}}, {{0x1c, 0x1, {0x3, 0xb1, 0x0, 0x4, 0x2, 0x6, 0x4, 0x1}}, {0x8, 0x2, [0x24c7]}}, {{0x1c, 0x1, {0x72, 0xee, 0x3, 0x4, 0x3, 0x1ff, 0x6, 0x7}}, {0x14, 0x2, [0x4000, 0x7f, 0x1, 0x81, 0x3, 0x1, 0x2]}}, {{0x1c, 0x1, {0xa5, 0x9, 0x40, 0x4c, 0x0, 0x2, 0x6b, 0x2}}, {0x8, 0x2, [0x1, 0x606]}}, {{0x1c, 0x1, {0x3f, 0xff, 0x1, 0x3ff, 0x2, 0x7ff, 0xffffffe1, 0x2}}, {0x8, 0x2, [0x5, 0x7]}}, {{0x1c, 0x1, {0x8, 0x6, 0x9, 0x5, 0x0, 0xcc27, 0x523, 0x1}}, {0x8, 0x2, [0x85]}}, {{0x1c, 0x1, {0x8, 0x3, 0x3, 0x800, 0x5, 0xda1, 0x8001, 0x1}}, {0x8, 0x2, [0x1ac]}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000007c0)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000800)) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/mls\x00', 0x0, 0x0) accept$inet(r7, &(0x7f0000000880)={0x2, 0x0, @empty}, &(0x7f00000008c0)=0x10) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000900)={0x2, 0x7, 0x6}) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000940)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0xb) sync() r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000000980)) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r11 = openat(r2, &(0x7f0000000a40)='./file0\x00', 0x0, 0x41) renameat(r10, &(0x7f0000000a00)='./file0\x00', r11, &(0x7f0000000a80)='./file0\x00') ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000ac0)=""/53) 12:47:58 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, "0b8c01a5bc52fe4243d8"}, 0xb, 0x2) r2 = dup2(0xffffffffffffffff, r0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x40) ustat(0x7, &(0x7f0000000180)) r3 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x1f, 0x94, 0x7f, 0x0, 0x5, 0x2800, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x481, 0x5, 0x5, 0x9, 0x1, 0x1e45, 0x5}, 0x0, 0x10, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, [], [{0x1f, 0x80000000, 0x20, 0x5, 0x0, 0x8}, {0x7, 0x8, 0x165, 0xfc, 0x20, 0xffffffff}], [[], [], []]}) r4 = socket$netlink(0x10, 0x3, 0x7) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001440)='/dev/full\x00', 0x40, 0x0) write$P9_RVERSION(r5, &(0x7f0000001480)={0x15, 0x65, 0xffff, 0x200, 0x8, '9P2000.u'}, 0x15) select(0x40, &(0x7f00000014c0)={0x98a, 0x6, 0x8000, 0x8, 0x9, 0x6, 0x9, 0x5}, &(0x7f0000001500)={0x100000001, 0xffffffff, 0xaf, 0xfffffffffffffffa, 0x7c, 0x4, 0x1, 0x2}, &(0x7f0000001540)={0x6, 0x3, 0x8, 0x7, 0x3, 0x20, 0x5c1d, 0x35}, &(0x7f0000001580)={0x0, 0x7530}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000015c0)='/selinux/mls\x00', 0x0, 0x0) fchdir(r6) r7 = creat(&(0x7f0000001600)='./file0\x00', 0x8) ioctl$EVIOCSREP(r7, 0x40084503, &(0x7f0000001640)=[0x3, 0x3]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001680)=0x0) ptrace$cont(0x14, r8, 0x7fffffff, 0x1f) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000001700)={0x0, 0x0, 0x3, 0x0, [], [{0x0, 0x101, 0x80, 0x5, 0x7}, {0x800, 0x100, 0x9, 0x100000001, 0x2, 0x1f}], [[], [], []]}) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000001880)) r10 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000018c0)='/selinux/member\x00', 0x2, 0x0) fcntl$getflags(r10, 0x3) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5d) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001900)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001980), 0xc) splice(r11, &(0x7f0000001940), r12, &(0x7f00000019c0)=0x3, 0x8, 0x5) 12:47:58 executing program 2: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000), 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000000c0)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e5f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x666}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040041}, 0x8010) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x406, r4) r6 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x200) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000440)=0x4) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f0000000480)) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f00000004c0)=""/31) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RXATTRWALK(r7, &(0x7f0000000540)={0xf, 0x1f, 0x1, 0x8}, 0xf) r8 = accept$inet(r3, 0x0, &(0x7f0000000580)) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/checkreqprot\x00', 0x1, 0x0) sendfile(r8, r9, &(0x7f0000000600)=0xfff, 0x4000000000000) r10 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x3f, 0x480000) ioctl$BLKPBSZGET(r10, 0x127b, &(0x7f0000000680)) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ppp\x00', 0x0, 0x0) fcntl$setpipe(r11, 0x407, 0x9) r12 = accept$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000740)=0x1c) readv(r12, &(0x7f0000000940)=[{&(0x7f0000000780)=""/19, 0x13}, {&(0x7f00000007c0)=""/187, 0xbb}, {&(0x7f0000000880)=""/159, 0x9f}], 0x3) geteuid() 12:47:58 executing program 3: ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='team0\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f0000000080)=""/226) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x40, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x1, 0xff, 0xb8, 0x9}, 0xc) getsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x4, 0x404404) fcntl$notify(r3, 0x402, 0x80000030) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000300)={@loopback, @local}, &(0x7f0000000340)=0xc) recvfrom(r4, &(0x7f0000000380)=""/230, 0xe6, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='bpf\x00', 0x201400, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x7f}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x2dd7}}, {@mode={'mode', 0x3d, 0x10000}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) r5 = socket(0x1, 0x1, 0x0) getpeername$inet(r5, &(0x7f0000000680)={0x2, 0x0, @loopback}, &(0x7f00000006c0)=0x10) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000700)) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x800) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000780)={0x3a, @multicast2, 0x4e22, 0x1, 'wlc\x00', 0x23, 0xfffffffe, 0xe}, 0x2c) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/validatetrans\x00', 0x1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='trusted.overlay.redirect\x00', &(0x7f0000000880)='./file0\x00', 0x8, 0x3) getpid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/zero\x00', 0x101000, 0x0) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000900)={'broute\x00'}, &(0x7f0000000980)=0x78) r8 = dup(0xffffffffffffffff) ioctl$TIOCCONS(r8, 0x541d) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$UHID_DESTROY(r9, &(0x7f0000000a00), 0x4) ftruncate(r5, 0x20) r10 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000a40)={0x7, 0xff, 0x527ac1b0, 0x3, 0xa, 0xde, 0x9, 0x7, 0x20, 0x7, 0x8001, 0x7fffffff}) 12:47:58 executing program 1: r0 = dup(0xffffffffffffffff) openat$cgroup_int(r0, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r3}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000200)='./file0\x00', r4, r5) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f00000003c0)={0x8000000}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, &(0x7f0000000440)={0x1, 0x9, 0x1000}) fcntl$setstatus(r7, 0x4, 0x81800) r9 = openat$cgroup_ro(r7, &(0x7f0000000480)='rdma.current\x00', 0x0, 0x0) ioctl$TCSETA(r9, 0x5406, &(0x7f00000004c0)={0x5, 0x8001, 0x7, 0xf08, 0xb, 0xf3, 0x0, 0xff}) r10 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000540)={0xfa91, 0x8, 0x4, 0x800, 0x7, [{0x4, 0x3, 0x1}, {0x3ff, 0x8, 0x1, 0x0, 0x0, 0x2804}, {0xac5, 0x7fffffff, 0x1000, 0x0, 0x0, 0x1000}, {0x3, 0x5, 0x3, 0x0, 0x0, 0x2201}, {0x2, 0x8, 0x5, 0x0, 0x0, 0x2}, {0xff, 0x5, 0x5, 0x0, 0x0, 0x1000}, {0x7, 0x7f, 0x2, 0x0, 0x0, 0x816}]}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) connect(r11, &(0x7f0000000700)=@generic={0x8, "b3c6fcf89854d2a0ea4867bcf1f6eb78900b9d998047cc73db13477e47a4ad143fd12d885c62d035df5721597372676b28d5ff26d066083ec63e7881ceb1564956b4f65e4a468923e2f34bd9a80b2237af63f0c837f3d375958f5d10e5b3f1dfdff5aca5a8ae1dbbfebd78873ce100f9066b9571f4149a3c068746f992f3"}, 0x80) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780)='/dev/zero\x00', 0x400000, 0x0) ioctl$BLKIOMIN(r12, 0x1278, &(0x7f00000007c0)) r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getdents(r13, &(0x7f0000000840)=""/63, 0x3f) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r14, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80010}, 0x10) r15 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000c80)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r15, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x160, r16, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2008801}, 0x977d28a1922d9bd3) 12:47:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0xb4e) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x662603, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x707c00, 0x0) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000280)={0x5, 0x5, 0x7, 0x1ff}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$smack_xattr_label(r5, &(0x7f00000002c0)='security.SMACK64IPIN\x00', &(0x7f0000000300), 0x1, 0x2) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000340)='security.SMACK64\x00', &(0x7f0000000380)={'trusted['}, 0x9, 0x2) r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="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", 0xff, 0xfffffffffffffffa) keyctl$set_timeout(0xf, r6, 0x0) r7 = getpid() getpriority(0x1, r7) listxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=""/255, 0xff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f0000000680)=0x10001) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCGDEBUG(r9, 0x80047441, &(0x7f0000000700)) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x602001, 0x0) getsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000780), 0x10) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) r11 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$trusted_overlay_redirect(r11, &(0x7f0000000880)='trusted.overlay.redirect\x00', &(0x7f00000008c0)='./file0\x00', 0x8, 0x2) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r12, 0x8004552d, &(0x7f0000000940)) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000980)='/dev/null\x00', 0x80880, 0x0) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r13, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xc0080}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x204, r14, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc518}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7e59}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) syzkaller login: [ 92.859430] audit: type=1400 audit(1574599679.694:5): avc: denied { create } for pid=2098 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 92.880129] audit: type=1400 audit(1574599679.714:6): avc: denied { write } for pid=2098 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 92.910665] audit: type=1400 audit(1574599679.744:7): avc: denied { read } for pid=2100 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 95.006361] audit: type=1400 audit(1574599681.844:8): avc: denied { associate } for pid=2103 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 95.144748] audit: type=1400 audit(1574599681.984:9): avc: denied { create } for pid=3500 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 95.172229] audit: type=1400 audit(1574599682.014:10): avc: denied { connect } for pid=3500 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 95.202180] audit: type=1400 audit(1574599682.044:11): avc: denied { setattr } for pid=3518 comm="syz-executor.5" name="current" dev="proc" ino=8033 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 12:48:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000200)) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bc", 0x6a}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000002) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) r6 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) r7 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r7, 0x0) r8 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r8, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) r10 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) r11 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x810, r11, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000280)={0x0, 0x4, 0x7, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x4}, {r7, 0x0, 0x200}, {r5, 0x0, 0x59a}, {r8}, {r9, 0x0, 0x457b}, {0xffffffffffffffff, 0x0, 0xc6}, {r11, 0x0, 0x3e}]}) 12:48:02 executing program 4: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x6, 0x43, 0x3f, 0x1}, {0x4, 0x4, 0xff, 0x8}, {0x100, 0x9, 0xff, 0x7}, {0x2, 0x3, 0x20, 0xeba}, {0x3, 0x1, 0x80}, {0xd56c, 0x3, 0x3, 0x9}, {0x401, 0x11, 0x1}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x10324) sendfile(r4, r5, &(0x7f0000000000), 0xffff) fcntl$addseals(r5, 0x409, 0x8) dup3(r4, r5, 0x0) dup2(r5, r3) 12:48:02 executing program 2: listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x100000000000002) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/112) perf_event_open(&(0x7f000001d000)={0x1, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) epoll_create(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f00000001c0)=0xffffffff000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000480)=""/197) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020660b, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xf4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r5}]]}}}]}, 0x40}}, 0x0) keyctl$link(0x8, 0x0, 0x0) r6 = socket$inet6(0xa, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 12:48:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) bind$inet(r5, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000078000/0x1000)=nil, 0x1000, 0x0, r6) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r5, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r5, &(0x7f0000004f40), 0x3ffffffffffff80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xfb, 0xffffffffffffffff, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2f) r7 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0x100000000000002) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0x498) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', r10}) splice(0xffffffffffffffff, &(0x7f0000000040)=0x4, r7, &(0x7f00000000c0)=0x9, 0xdb, 0x0) fcntl$setownex(r8, 0xf, &(0x7f00000001c0)={0x0, r4}) dup2(r2, r5) tkill(r4, 0x1000000000013) [ 95.316597] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 95.325983] [ 95.325985] =============================== [ 95.325986] [ INFO: suspicious RCU usage. ] [ 95.325993] 4.9.202+ #0 Not tainted [ 95.325994] ------------------------------- [ 95.326003] include/linux/radix-tree.h:199 suspicious rcu_dereference_check() usage! [ 95.326005] [ 95.326005] other info that might help us debug this: [ 95.326005] [ 95.326010] [ 95.326010] rcu_scheduler_active = 2, debug_locks = 0 [ 95.326015] 2 locks held by syz-executor.4/3542: [ 95.326044] #0: (&sb->s_type->i_mutex_key#10){+.+.+.}, at: [<000000003332d797>] shmem_add_seals+0x166/0x1020 [ 95.326062] #1: (&(&mapping->tree_lock)->rlock){..-...}, at: [<0000000039bb8d95>] shmem_add_seals+0x342/0x1020 [ 95.326063] [ 95.326063] stack backtrace: [ 95.326071] CPU: 0 PID: 3542 Comm: syz-executor.4 Not tainted 4.9.202+ #0 12:48:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x109, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000020000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4b, 0x400}], 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x100000000000002) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000002c0)={0x9, 0x400, {0x53, 0x7fff, 0x5, {0x4, 0x200}, {0x401, 0x1}, @rumble={0x1ff, 0x3d14}}, {0x7, 0x7, 0x534, {0x7, 0x101}, {0x5, 0x1f}, @ramp={0x9, 0x7a, {0x8, 0x4, 0x8001, 0xfffe}}}}) connect(0xffffffffffffffff, &(0x7f0000000140)=@x25={0x9, @null=' \x00'}, 0x80) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/205, 0xcd) [ 95.326085] ffff8801a19efca0 ffffffff81b55d2b ffff8801d918a968 0000000000000000 [ 95.326097] 0000000000000002 00000000000000c7 ffff8801a1828000 ffff8801a19efcd0 [ 95.326110] ffffffff81406867 ffffea00067003c0 dffffc0000000000 ffff8801a19efd78 [ 95.326111] Call Trace: [ 95.326139] [<0000000034723ffc>] dump_stack+0xcb/0x130 [ 95.326149] [<00000000b6ca28a8>] lockdep_rcu_suspicious.cold+0x10a/0x149 12:48:02 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x70bd25, 0x0, 0x2}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8001}, {r0}], 0x2, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)={0x2}, 0x8) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x0, 0x3090, 0x0, 0x4, 0xf, 0x6, 0xff, 0x0, 0xab}) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x4c2) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='wlan0\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket(0x1, 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010ff07197a00000300000003000000010000007c0f68a466f118903fa26ddae0b51edd1e228a80bb30d884ef68e7267fe0863bd3bde860c580fbd065ead7a0d6f7b5675bc23da32dfd4eab72bad4e64bc07cfc2d660c04d63fd76e08e3e0328127c397b045a66c516368e7b59c348a1f1c9ba320c544320be6c0a8ee5277e7333e6f286df314112105ca8420bac3fbcae6781b3a1eef3ef4f009774ce87847aa425606a416356ba293802931a4ea6a39484ece6adb1dfbb5d9c96d7b3a2241cc9ff2a6af9daa9af12b2ebb876cd1985e5902689b1c89015279a20f9c597e577034f1c5e1ef7b361a27db12f2d011478d6eb31fb0b96fc1c29ea018974a3b1c914ce9cd4b2d1fbc1eeb36020b582fa5c77adc765c991dcffa707fdf59e4634de769f2c01ee3f0b3419f8df614a8a0b2cf659c4be14deeea704cb1850b704ae4231cf3a321e6ef3088c34480c9e0533fc0965313842eebb8cdd1bc9af067f55a1f39c724a9efb5793d0a8d9a65e341c78664ff5f3c3fec0b2795822215f407bbf350437c6bb621d0975a2927ead514126bb1a473787ebda6a3669a2f1f895469c18a6e35a7adf1650e3855c3668d8b9b5031edc6884cef08da7347186ba6f39e97b8991786b44da1add2c299602969bc3565a2266198cfa122dc69f3fa99c9929ee99ffa76d6c1b9513296ead719a1a6bd0555788342e26ff24ff9adcdb82ea84613fc769f8f49db5b0374cba439526f644a7d925e05eb7d3efec9aeda75fa888c0f62d95ab86c2a837f7f47adff76c0b6662fa01cac195361790b385ccea84802faca0bca6729f787fa387b02b035b22d7138bedd42df41ac6a638142f85f362ad3dba9a3ef9ed2f57791e6d4a28ae90bdd18433411931c6a559acc3cd3be217ca4421d82c7bfa73c001a728afd1a869b7a8c163a5416e750932b8f11c176ea0a21180036b621eba4f2120ce9f3709f2a3d879c9bb3b1c7a4e5a65da746c00cc214c89e0b2eb9416b435afdb4a03112ba335cbaddcae759876d7bb0ecd7109dfaa58e0f1a75a9f0a7ec618aadbd9594791605da186615b5aa5aaae3d24f614ce8140cf98fb88e840273782a51b72268f195e26752bd8bffb52471f006c67a1f0e57f12d2f09a0dda96dba511aac0d59e18e77fdf5e4babfa3268f1ca12c56e6f5a72c118f98e2337a3d8bfd096d1635b6b61a7bc53a29ec952713d0c53dccc7ff173f84ebfdfffe2de26c6ed9729d27b1074a3742c1bf98437556ebca38f07152fe9e372625c5d5bbf84baf74dd868d8718ef236b71b230f3ed8526e2d4e13ea28f1eaefd29849faa9413f46f650136805d359c2e216eefbd608c0374df4d90d8f162308b512ceed231810c41e80d4671c27305def739e1d6ed6570f2bb5b2563fdafc870ff9a7eb4b095668600e97c4f9f19068ed81b4d57411c80140126571ee84cac8709cb23eeff1e11715debb17dd5da94467ec069f74a8be4d14455ba218bad681b9f5e38d177bdd1197083b085b17e52c6ffaac3ba1360b4eae43eab428188eed3b69d0bf23910663542d214eb4a20af547207d48373ea58b637165d48b32cb90b0e1584ef0af3b70a18ac31127da99d8ad77b3efcf69047e3d4fa293613e0a4f0afeb4217c2bc04ea41f9a6d8829ebae34078264ec630a77e1d2689885123ba8b9568392b2b6887d618870fb0db4efbf1dd6b30090d1655eccf9c2b095c06d98cccf464664e4761a5fec8596ef13497421f6d97446dfebcdf000a8aeab4e0f6cc9d8a75e1f160ef6d0d42f79ff014ea1c87e6eb11df3fa627fcebf39e67a04fbcb0c4bf406a4e067385a15095a684e86039d17009945cc558316aadc54674e5c2ffc02cac52484085035610ed7d458a3302f8e5a64c28a9a92a0e7e5513c098c86ff052b01b9d0e718079b7c2485ba054e86c47659d1de3b6978fba28f744af67e2f60948fb9d3b10d9a007f22a1a7f76960dcba961fafa7e8438bb8803aad9a62bb424abb647abf3f12ddcb8ad11d688aa6f8e69a6de5d314127ee4e04942d52c574f263d9c43a159552dc3fa2cde8f4b481fe613efb2ec5a3df8626ef603af8f0db9813757cf0c78af64e335394499a4b6538d9bc3a129a96701b570c285bbc07f4288f901c739a668e91a2dad74c687ece9162671842c44f4be586bd9e1214a026917f24d3af0c29326c51d304ce712b9f8120cd6dc2e5c1157941f8d610398c27a3a289a09ead6678dc70394b52dcfce0971a11c23afbe128ba0e9d46b68ace80ad953bb2afaa93a75d1d6f1a4f70e4bd4893cc9cb21098d798a00ef5e2aa200c5a463347ea58091084ae8e41a1490d90028c8a2e274bee54d3e06f7f6693c1929f93351ed4cedf436733146a0135be6d075670d951ee6e380c6b3290329c705d409ce58d25b661c87a0d14a0035613386eb3e9a05a9af7654d327a722cf29b906c5cd8f70a39700955f6054772d4f103cf8dea11742fd78fa4bc60c4c2b32c6113f784f9858e7dfa96c12553933c489ef5c70b9b352e43efc0389b91c0ef16e3c69462e1d0b8f9bdcbeeee5a4b5efcc0d4b98fef7fd12f9f967ac07ea9553bc858ad919b668f05d0672e13c0ae1a836b768f1930a6236c11a146809eb8f06290503018f07a72c2887a0030483ed8c7aa2287623d70ba928cd5e2daab958745c5bebed7ff34a3fdb3e1d20f37b1e96c3e24f7551b7c9015efa34906bfac4f0f5304e84f8aee54f8409c136572d676813fd82ac73717ba742c6b11dc3e787f8bd22e9f1ee0c9a49e8ad51adcb309e95fb8b8e1f0cdf96c1cfee55dc4ac2fbe7f0b7d1e1bcc9664e2f3038942541233e5c6aaebd26e04d6e3d2034f748a7f2e5df5aea93415c698db8ed750af51f29e6cda73ea7f2f6814f724d9f4f2677a818a4d33231ad11027911db3fa4e30e39d2fb8b0ae891762cf1938b9f9b4923ad184eb210eb27fca18e4a41b86424a74f7888f5ca147dd019e69c10a79c8a931ca719093d24c2024ceb3fd2d14e0e62c49923c689c9897be0cd529a0bcc57f93235e8548359b03630239b66084ee03de01d819c98d30029eb6c4ca21a4b8d14d2b2b65143530e24320339e8f41f76c3888c0489f57c44b6b856e0903d70f469a90841e858eb496b8c450b0df1abb6fe5d69dfaec7d10029e11376b26882a758ba18a6dae9b8c11da54b3a0ad749f65f53c4e8297074d431885b8b6d47309a8e7d3c6855ae009a73de4194a0517ba76c03e9b644b1e82860435d0e7f90ae0e2ee62fbac765877a4e6cadc7231ee94f5bd8dbaf901ca4887dbfb101cc3746c088ddf4f2e6c7a237f2d9b1488a59450d2d86e2ebf4127672bd554780b2026afa2a889617c4a04fea0599c86e19bcd6b7e9900832fcc5be6796867579f6e814f68bd7335c9a5a1d6432c59d1cb7d694fb8caa0188f1710de8fe4333fd7241bd492a1d031200398581aca30c75a289691a3862bf9346567ecd096a1f42d65d705b031d4e510dfaf5c9a181079b7473fbe2d0ee80a331f4d1f623aa7a6e7cb25504a512592bac651f72b9b5bb9c47c45a69cc4193e36bfdc5ef8e0af6503b709a1ef4356eab3344bb50490536ae6923b9710c62fb054b5feae8b6fb77d5a82c105e555ca39e6df1f68139faf21182161b110855ce15633f64b10ca046aff4c2aa3bfa602d6bdeacc4d1bb48e6726711102c9c2cff59ac4b43d9837181ce95ad84ffb916992827eae0946d886e7f7aa6a33a5dcbea34ac156c42183fdad21e6bf8a317fd911ce3ca26a7acc86061104e263a272f4759747dd71c79c8a71717ea9e085716d83fa893f05fcdd075ae2df3869f0839acd2151e1627b0542f157ee34b937bd56736b778fe1a927d20e382934fb6591a5c2de96315d602a73404e8aa6b9ad5fe9c5f60cf9efd781ad114e054c9357aea4cfb3b3717ee882dc42eb2f278a01b1aa81bda552cf4564e8e9c61afc6a67e6bdf6070c08895df4e496e5fb29d48ed297e2206cd3754d2faa2f32fec00519ca2cd980816fa387992d64b7d0e6b261f0a018513c099346fd47156c9d5d620ee62e2d4b488c56bbc94f1b7800c5c4a376366f5b900103c0303f656001df9106d005723a6a52748ea0b9908f348f837eaaf3781a0afff2296ca28033251c90722b8abaf3bc9f9d17f125fdabf7cebed6d461886b55d5976ac8b84de6de8636c0d4a0d9fd1e096da11066adef32b211d81f42dbf4897db7b7f41162180691dc429839a1786918e97d30086edca3a8cefbe8c1711ec5109ac5b8cae1c19df2632ce3288e67cd4f2648a94c2b7b9dbe16346f3ebbe0914355b1275a015dbfc2c85a33d1ad1916bf1dff0cbf118058be8296601a225df3dd9f2a5122496debac5ba873e377927d07ec86c7e6f26ff12ccfed24fe4b27a0e3aa4b2d81f989071b37d7f4aa66694867a4efffc1c35a133a227b4d1cee09aa416c0520cc07241af0091a8e296aba119591562a17d1a0f711a6e6d00aeb5159d266143dc1d1b2f0e69f09da8c4aab10560fbc2ed6a1cc5dc8db36740148a4bf09ba51a6584b6ebcf99781a5c9fc4d1f926ece83e4a1a7be2e82c82a662258ab274f4527f85d58596657ed96c38d9d4a4e9e3ab5a13249d791c25c1ca907de1ad492b604361972be074a41ef5e58b9fb36d7364f2a3c606a7e77d59a662318a7d34b0350042e0bb306af9ace3c600dc1f4be5bf319b1f09179fa85b0a63d25a9f86944d21bf73bb45323143c23f9b98f513ec99e9271d413a459ba9239d9838b6cdf6d33d835f8bc84837d92f4b1ff981ecc2d28706c29b0911de88275680bbc18ad09d8e987de567ea108394424fa11339e61e9b6b2024dee7edcb2704ad68e86e2c1015a4acf61fd2b7013aa8a6cc1fd5aff41a179a298a24890a9f3de86b5a49d0d0343433f2abfd7c265a14d903115c483a1c1d04c34819d0eb714258d4e22529e0ee844a3874f3452cd9ca18cab20b5effeb78792e7dde402e10fdd979c3d770adc35d557656703ede6d69cc37db8eb849b02e110417ddd1ea278c9ad8e92009fef9c101ae6a13f4c757464412114745c69fef361bec5decfddaa31e98a78acb26c5631b8816ebc92bf521ea63d9275994c40f89be3834e0cd5ae41bec92916f69480530fc677d13ce320a1a7d3b1b588ba5f8729ce2beb79ff50ba308e7fcbd918bac9ea69e09cd91402235ca218d8b15ef08433249daea897f2bf2a02c7de7a0daace1707b8ade6302306a7f3ca3bfc30eb506e5fd12a506b4987803b2b80becf7a3c3a0f5c27ee59949dcec69e56794d3b24df53abf7d29d1ae550a8e5ea3c3d9c2b3822cf3622e0797db5df893cb52d36045cb9eefb5f1134f3b1d069787987e6bf8e2bbaeeeeacf9a6e17d023220419e77ef2e7b5bcd380a92dc27719e0ad9fe83e89fc5e83ffc6124839144cf49696a69b397cc0f6871599b55c7564cc815b275926a487c3728b361549f9f094943cad83cc730397bcf497ad066b2b7a32dc43e6a2d673cf4a0606620d1e0be8e3e4c6ba30639487a1fb5068ce96a07d9656d87301c5b9638004ac30d381960a5e5ff9cf7f7553877341dead6c1251e33bfed51251d15316a167afc82f60737410863292c98ae8e34bde84182dceb86c07fae7d44205e6a491c9871f8ec64dc12dbb8fdb2a21b193f9b636c8656a5f5d41a557568034ebd2b70ff039c02ab33d9bb1939e09d49aee725aff9b91076952a72021bc1178fb26cb16f928bb9fde924bd2cf2f70304193dbfac7192bcab53ad73a51fa7e7b6980d2c140b929a6f0dc835cb1f7dbb3806542477301e605853dc5a3e2aad1894847001"], 0x1118) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x100000000000002) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f00000014c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x44f7d067, 0x4) [ 95.326157] [<000000000dfc64ca>] shmem_add_seals+0xa44/0x1020 [ 95.326165] [<000000007796e3da>] ? shmem_file_llseek+0x250/0x250 [ 95.326174] [<00000000d085761f>] ? __fget+0x22f/0x370 [ 95.326181] [<0000000070ef5fd0>] ? __fget+0x47/0x370 [ 95.326190] [<00000000b3ffa9fb>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 95.326199] [<00000000e5c6445a>] ? selinux_file_fcntl+0x6c/0x120 [ 95.326207] [<000000008edf918d>] shmem_fcntl+0xf7/0x130 [ 95.326215] [<0000000058b8c949>] SyS_fcntl+0x1d5/0xb50 [ 95.326223] [<00000000380913e0>] ? __might_fault+0xe4/0x1d0 [ 95.326230] [<00000000331b20b9>] ? f_getown+0xb0/0xb0 [ 95.326237] [<000000000dc0dbb5>] ? do_syscall_64+0x4a/0x5c0 [ 95.326243] [<00000000331b20b9>] ? f_getown+0xb0/0xb0 [ 95.326250] [<00000000e2db1441>] do_syscall_64+0x1ad/0x5c0 [ 95.326259] [<00000000cb048fb7>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 95.393567] hrtimer: interrupt took 26042 ns [ 95.461237] audit: type=1400 audit(1574599682.294:12): avc: denied { prog_load } for pid=3547 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 95.473204] EXT4-fs (loop4): fragment/cluster size (2048) != block size (1024) [ 95.483954] IPv6: sit1: Disabled Multicast RS [ 95.555538] EXT4-fs (loop4): fragment/cluster size (2048) != block size (1024) 12:48:02 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000980)={&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x100800}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)}, {&(0x7f0000000540)="50879d7cf189a13afdb3dda2b34f921a5d1ccb0423a37fd8981092a5d5588160ff70e5a53036f1a5521223ee01fae4f50ecab57e484dffa2d8b319b9b367ac1afd5ad0ee418612e99dee1a55e6c100", 0x4f}, {0x0}], 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="a8000000000000000000000000000000ff3e9bf044be6e8f43ad92f876ab4b57a694f4b513a2a28d41e0a47d4752d90253b2fd8ab21e014d1cca55513f8799db47af83ee1cae803d270ac489d32a6eab560392515386265415d463d1435c614243b81805be5f112fa4ea6b45a50f0aa2d8f475851bb01765dbdfa43940a426bc0d81bec917f1b83a460ca90f98acc81f11b3d074b2b317adf56d2482e5970e000000000000900000000000000000100000000000000002010000060000003f9f4450cb5922690958d9116a73dd04c88770ec9af7e7d0804d9d9699fa7802686536dc501ff66ad61fa4e843417a5669f31cfb05abaaac10a11bfc9182302c6c63973b8f40914a17cf17acf697d1646c2c484be521f94b24a230427b299e989c0d654fc18df29c4d52e3c647d2be50c44feb32dba1fa01da84ee62d05d800871b7e53e5d7ff3a7f5cbba"], 0xdb}, 0x0) fcntl$setpipe(r0, 0x407, 0x4) mknod(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x9}, 0x3200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x5b) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x4e24, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000180)=0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/d\xf4DQ\x91K\xe2\xed\xd0', 0x60a340, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x7) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0xa, 0x85, 0x4}, 0x10) unshare(0x40000000) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='limits\x00\x80\xa8\xdb\x02\xffC\xd2p\xa5W\x14\xa2\xc0+\xfc \x84YN\xff\x1a\x7f\x85\xf1\xa7(q|\xe3\xed8\x15\x18,?\x06\x86\xc9\x80\x86\x1b\xa8\xc4J\xcb\x7f`\xa3\xf2\xb5\x03l\xc1~cK8\xf3\xe1;JG\xed\x0f\xb3\x95\xb2\x14z{d\x1d\xff\xc5\xcd\xe0\xae\xd6\xbdS-\xc0\x90m\xa0\rq]K\xe3\xff\xff\xe1Q\xeb7V\xfe\x17\xef9.5\xafc\t\x13\xde\xc7\x8e\xebn_Q\xeb*w\xa7\x9e\x8ab\xdcS\xf0\xd4\xcb\x06`v\xc8\x01\xac`AqDS%S\xaf\x98\xb0\x02{\\\x9f1%\xf0\xf0\xd2a\x91\f\x153\xad{\f2\x90`bz\x14\x901R\xdd\x11\xd7\xc9\x10\x85\a\xd7\xf0|\xccW&\xe9\x81Eu\xa2db\xd6JJ$\xe1_fH') write$nbd(r5, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x57) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) ptrace$peekuser(0x3, r6, 0x1) 12:48:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(r1, 0x0, 0x0, 0x2000002) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x4}) pipe2(&(0x7f0000000000), 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:48:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x8b1b5d2f3ead6cf1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) poll(0x0, 0x0, 0xffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "e59b133cc78cecc57debbcd162da13cd1a1514ae"}}]}, 0x150}}, 0x0) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) sendto(r6, &(0x7f0000000200)="d779481d4d0c4d498a008dd69d63b9769e5d1f10d8a84070411951923cb2aa087d6d3df89be7b27ec0f61de7f3ec0fcde680d82388efe11914fac0695f2311144b870bccc6157656a63d667ec91c6b3f3fecff351a", 0x55, 0x20008000, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0x1f, @loopback, 0x17d}}}, 0x80) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000740)='fuseblk\x00', 0x0, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x3000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r7}}) getgroups(0x4, &(0x7f0000000500)=[r7, 0xee01, 0x0, 0xee00]) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000740)='fuseblk\x00', 0x0, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r10}}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {}, [{0x2, 0x4, r2}, {0x2, 0x6, 0xee00}, {0x2, 0x1, r4}], {}, [{0x8, 0x8}, {0x8, 0x1, r8}, {}, {0x8, 0x1, r10}], {0x10, 0x1}, {0x20, 0x4}}, 0x5c, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 12:48:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400), 0x1fd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = add_key$keyring(&(0x7f0000000000)='\x01\x00\x00\x00\x00\x00V\x0f', &(0x7f0000000080)={'\xa9\x00'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0xfffffffffffffffd, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r4, 0x0, 0xfffffffffffffdc1, 0x0) add_key$keyring(&(0x7f0000000900)='\xac\x82\x1e\x88?\xf5D\x9f', 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000d40)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x8, 0x70bd26}, 0x1c}}, 0x0) r6 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinu\x8c/avc/cache_threshold\x00', 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1d55) getegid() setgroups(0x0, &(0x7f0000000200)) r9 = getegid() setgroups(0x1, &(0x7f0000000200)=[r9]) getgroups(0x0, &(0x7f0000000240)) fsetxattr$system_posix_acl(r8, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="fac85aeaf927877416f2567301a1fe41f2cf991ae46aad1126bd929d0b65b8c0f95b1811e5592165afc194000029f5b93ab03a7bcc477b7cbf30125a60c89de0e3ef8100f80dee9326067701000000867f24a1017234ed9979518ad51a273bd15f26edd4843ba3fc4175abfae9f1d7000000006d74c650cf99c0f2dbaabc9664232180185db726ba7b2a6b542b748546e3c7ec16b28a6b3bb4c98217d21295a8a8fd55d92b0a2f9b303cc9"], 0x1, 0x1) r10 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) r11 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r11, 0x0) dup2(r8, r11) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000680)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r7, 0x80003) sendfile(r1, r7, 0x0, 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8, 0x0, 0x1000000000000000}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x3}}, 0xe8) 12:48:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x1}) r2 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r2, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0}) r4 = socket$inet(0x2, 0x80a, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x41, 0x0) ioctl$TIOCSSERIAL(r5, 0x541f, &(0x7f0000000580)={0x0, 0x9, 0x2, 0xfff, 0x1, 0x3ff, 0x4, 0x7, 0x7, 0x80, 0x1c, 0x9, 0x5, 0x0, &(0x7f0000000340)=""/184, 0x7, 0x1fc00000, 0x3}) r6 = socket$inet(0x2, 0x80a, 0x0) fcntl$dupfd(r6, 0x0, r4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a62770000000000040000000000000000000085cd76a5eafa4e4b2cbf1a41db76a6883089cbf2c63b2810e0e03044e439d8f251e4120e80bd09d183d4e27dc69f41d13e62114f8727e0af5d380efa1afe31940e4eee9f627ba97c9792bddd44983ffc732ea85eda0605f220cd2d8c3adf2f1c5d2ad9ba93"], @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, 0x0}) 12:48:02 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x100000000000002) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x0, 0x9a89, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x184, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x65dc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0xfffffffffffffd7a, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r3, r6, 0x0, 0x80000003) [ 95.975389] audit: type=1400 audit(1574599682.814:13): avc: denied { create } for pid=3502 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 95.999866] audit: type=1400 audit(1574599682.834:14): avc: denied { write } for pid=3502 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 96.070146] binder: 3614:3620 ioctl c0306201 20000140 returned -14 [ 96.087037] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 12:48:02 executing program 1: ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x80008}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r2, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003b80)=@in={0x2, 0x4e22, @dev}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r1, r0) preadv(r0, &(0x7f00000017c0), 0x1a6, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 96.141246] binder: 3614:3627 ioctl c0306201 20000400 returned -14 [ 96.233937] binder: BINDER_SET_CONTEXT_MGR already set [ 96.239640] binder: 3614:3627 ioctl 40046207 0 returned -16 [ 96.258598] binder: 3614:3627 ioctl c018620b 20000240 returned -14 12:48:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 12:48:03 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400), 0x1fd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = add_key$keyring(&(0x7f0000000000)='\x01\x00\x00\x00\x00\x00V\x0f', &(0x7f0000000080)={'\xa9\x00'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0xfffffffffffffffd, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r4, 0x0, 0xfffffffffffffdc1, 0x0) add_key$keyring(&(0x7f0000000900)='\xac\x82\x1e\x88?\xf5D\x9f', 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000d40)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x8, 0x70bd26}, 0x1c}}, 0x0) r6 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinu\x8c/avc/cache_threshold\x00', 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1d55) getegid() setgroups(0x0, &(0x7f0000000200)) r9 = getegid() setgroups(0x1, &(0x7f0000000200)=[r9]) getgroups(0x0, &(0x7f0000000240)) fsetxattr$system_posix_acl(r8, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="fac85aeaf927877416f2567301a1fe41f2cf991ae46aad1126bd929d0b65b8c0f95b1811e5592165afc194000029f5b93ab03a7bcc477b7cbf30125a60c89de0e3ef8100f80dee9326067701000000867f24a1017234ed9979518ad51a273bd15f26edd4843ba3fc4175abfae9f1d7000000006d74c650cf99c0f2dbaabc9664232180185db726ba7b2a6b542b748546e3c7ec16b28a6b3bb4c98217d21295a8a8fd55d92b0a2f9b303cc9"], 0x1, 0x1) r10 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) r11 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r11, 0x0) dup2(r8, r11) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000680)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r7, 0x80003) sendfile(r1, r7, 0x0, 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8, 0x0, 0x1000000000000000}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x3}}, 0xe8) [ 96.285590] binder: 3614:3620 ioctl c0306201 20000140 returned -14 12:48:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x100000000000002) bind(r1, &(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x80) chmod(&(0x7f0000000040)='./file0\x00', 0x0) 12:48:03 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000065000000000000000f00000000000000950000000000000081f4acef511af081d00f77f8cf166d1e71a9088bbae00e7b39b9a2d8427798f5d70480fb561635bae02d33e625c523efb33afe2cc9717f58dc217a800021f5468c6a66a6807c14bb23724a5719c7f081032fe008ad8bd6a3d0bfe49f4e6591ea02ed88d47bccd79b64340f8139ca1b202b845dbd6daa9dbc03f7773c235ba70b568bbd0a6573ee3a52913917f59d"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff11}, 0x48) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xc61, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x10001) r1 = syz_open_pts(r0, 0x220204) fcntl$addseals(r1, 0x409, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 96.364430] loop3: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p 12:48:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489192572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8042) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') prctl$PR_SET_FPEMU(0xa, 0x3) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x184, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x65dc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x14}, 0x1ff}, {0xa, 0x4e22, 0x3, @remote, 0x80000001}, 0x40, [0x6, 0xb06, 0x1f, 0x9, 0xfffff553, 0x2, 0x6, 0x9]}, 0x5c) r6 = socket$inet6(0xa, 0x2, 0x0) dup3(r6, r2, 0x0) sendmmsg$inet(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 96.460907] SELinux: avc: seqno 7 < latest_notif 8 [ 96.527084] loop3: p1 size 2 extends beyond EOD, truncated [ 96.537083] loop3: p4 start 1854537728 is beyond EOD, truncated [ 96.543881] loop3: p5 start 1854537728 is beyond EOD, truncated [ 96.553045] loop3: p6 start 1854537728 is beyond EOD, truncated 12:48:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0xfffffffe, &(0x7f0000000a00)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) [ 96.566727] loop3: p7 start 1854537728 is beyond EOD, truncated [ 96.574023] loop3: p8 start 1854537728 is beyond EOD, truncated [ 96.580597] loop3: p9 start 1854537728 is beyond EOD, truncated [ 96.592164] loop3: p10 start 1854537728 is beyond EOD, truncated [ 96.608483] loop3: p11 start 1854537728 is beyond EOD, truncated [ 96.630973] loop3: p12 start 1854537728 is beyond EOD, truncated [ 96.640010] loop3: p13 start 1854537728 is beyond EOD, truncated [ 96.653766] loop3: p14 start 1854537728 is beyond EOD, truncated [ 96.668447] loop3: p15 start 1854537728 is beyond EOD, truncated [ 96.682895] loop3: p16 start 1854537728 is beyond EOD, truncated [ 96.701959] loop3: p17 start 1854537728 is beyond EOD, truncated [ 96.715848] loop3: p18 start 1854537728 is beyond EOD, truncated [ 96.735183] loop3: p19 start 1854537728 is beyond EOD, truncated [ 96.755439] loop3: p20 start 1854537728 is beyond EOD, truncated [ 96.772866] loop3: p21 start 1854537728 is beyond EOD, truncated [ 96.786238] loop3: p22 start 1854537728 is beyond EOD, truncated [ 96.800856] loop3: p23 start 1854537728 is beyond EOD, truncated [ 96.821027] loop3: p24 start 1854537728 is beyond EOD, truncated [ 96.844540] loop3: p25 start 1854537728 is beyond EOD, truncated [ 96.859180] loop3: p26 start 1854537728 is beyond EOD, truncated [ 96.872767] loop3: p27 start 1854537728 is beyond EOD, truncated 12:48:03 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400), 0x1fd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = add_key$keyring(&(0x7f0000000000)='\x01\x00\x00\x00\x00\x00V\x0f', &(0x7f0000000080)={'\xa9\x00'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0xfffffffffffffffd, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r4, 0x0, 0xfffffffffffffdc1, 0x0) add_key$keyring(&(0x7f0000000900)='\xac\x82\x1e\x88?\xf5D\x9f', 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000d40)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x8, 0x70bd26}, 0x1c}}, 0x0) r6 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinu\x8c/avc/cache_threshold\x00', 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1d55) getegid() setgroups(0x0, &(0x7f0000000200)) r9 = getegid() setgroups(0x1, &(0x7f0000000200)=[r9]) getgroups(0x0, &(0x7f0000000240)) fsetxattr$system_posix_acl(r8, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="fac85aeaf927877416f2567301a1fe41f2cf991ae46aad1126bd929d0b65b8c0f95b1811e5592165afc194000029f5b93ab03a7bcc477b7cbf30125a60c89de0e3ef8100f80dee9326067701000000867f24a1017234ed9979518ad51a273bd15f26edd4843ba3fc4175abfae9f1d7000000006d74c650cf99c0f2dbaabc9664232180185db726ba7b2a6b542b748546e3c7ec16b28a6b3bb4c98217d21295a8a8fd55d92b0a2f9b303cc9"], 0x1, 0x1) r10 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) r11 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r11, 0x0) dup2(r8, r11) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000680)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r7, 0x80003) sendfile(r1, r7, 0x0, 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8, 0x0, 0x1000000000000000}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x3}}, 0xe8) 12:48:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489192572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8042) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') prctl$PR_SET_FPEMU(0xa, 0x3) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x184, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x65dc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x14}, 0x1ff}, {0xa, 0x4e22, 0x3, @remote, 0x80000001}, 0x40, [0x6, 0xb06, 0x1f, 0x9, 0xfffff553, 0x2, 0x6, 0x9]}, 0x5c) r6 = socket$inet6(0xa, 0x2, 0x0) dup3(r6, r2, 0x0) sendmmsg$inet(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:48:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x184, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x65dc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x23000010}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1d4, 0x42, 0x2, 0x70bd2d, 0x25dfdbfd, {0xd}, [@nested={0xbc, 0x90, [@generic="917720cd511324a5f2cd12e71e50108867d8f38b0e", @generic="2b7b3eb752c1f777f095290cc356df4bc8aaf1f5c347de7cd3fb477b8c50b6a9499500e55b05f99c46a8e71dc186e3e885cd55a48a6a43c1e4f1231597aae50485ced14e6987b9ddb203ec455261612315681450ecec9bcaa5528cc24ebbd580058f446e7bfa44b6c946bd41bfb6a1201029b1cae70a8e0dfe04be36a80b5893b014e7165d8af0542c7fd375f6a2ca7d097ce39c371d59f43f5e25da43fe77e56cf0da"]}, @nested={0xfc, 0x84, [@generic="d041f432a1c594bb9bce034a2afc8275bd07cd67fe9aa140cc8d5fb9d770710bc67b1840f8b2b4550da0342840df45468054ab67f697fcba403b5bcdd9d1a8a8f5612827f97c23f5", @generic="5d757014b32edbc90bb0ee175e202cb258f29921d55b815b599224caaa39a2395f2c91cd54c8bf35411eb965ac5d74ae2d18b64eeeb1d1f2711cf2350131ec138aff39cff7de9cf42ea6d22ac0147f444da07358afe0b51509aa1dcf3ff4b0fe2df5bd92153fe4bf62ec696a820fcad98caa8176b8187a621de2", @typed={0xc, 0x22, @u64=0xf081}, @typed={0xc, 0x46, @u64=0x8}, @typed={0x14, 0xc, @ipv6=@remote}, @typed={0x8, 0x14, @str='!%\x00'}]}, @typed={0x8, 0x4, @u32=0x3f}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x48010) sync() [ 96.887563] loop3: p28 start 1854537728 is beyond EOD, truncated [ 96.900854] loop3: p29 start 1854537728 is beyond EOD, truncated [ 96.922885] loop3: p30 start 1854537728 is beyond EOD, truncated [ 96.932144] loop3: p31 start 1854537728 is beyond EOD, truncated [ 96.941505] loop3: p32 start 1854537728 is beyond EOD, truncated [ 96.966593] loop3: p33 start 1854537728 is beyond EOD, truncated [ 96.975231] loop3: p34 start 1854537728 is beyond EOD, truncated [ 96.981760] loop3: p35 start 1854537728 is beyond EOD, truncated [ 96.990087] loop3: p36 start 1854537728 is beyond EOD, truncated [ 97.001083] loop3: p37 start 1854537728 is beyond EOD, truncated [ 97.008243] loop3: p38 start 1854537728 is beyond EOD, truncated [ 97.015259] loop3: p39 start 1854537728 is beyond EOD, truncated [ 97.021789] loop3: p40 start 1854537728 is beyond EOD, truncated [ 97.028659] loop3: p41 start 1854537728 is beyond EOD, truncated [ 97.053578] loop3: p42 start 1854537728 is beyond EOD, truncated 12:48:03 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400), 0x1fd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = add_key$keyring(&(0x7f0000000000)='\x01\x00\x00\x00\x00\x00V\x0f', &(0x7f0000000080)={'\xa9\x00'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0xfffffffffffffffd, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r4, 0x0, 0xfffffffffffffdc1, 0x0) add_key$keyring(&(0x7f0000000900)='\xac\x82\x1e\x88?\xf5D\x9f', 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000d40)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x8, 0x70bd26}, 0x1c}}, 0x0) r6 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinu\x8c/avc/cache_threshold\x00', 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1d55) getegid() setgroups(0x0, &(0x7f0000000200)) r9 = getegid() setgroups(0x1, &(0x7f0000000200)=[r9]) getgroups(0x0, &(0x7f0000000240)) fsetxattr$system_posix_acl(r8, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="fac85aeaf927877416f2567301a1fe41f2cf991ae46aad1126bd929d0b65b8c0f95b1811e5592165afc194000029f5b93ab03a7bcc477b7cbf30125a60c89de0e3ef8100f80dee9326067701000000867f24a1017234ed9979518ad51a273bd15f26edd4843ba3fc4175abfae9f1d7000000006d74c650cf99c0f2dbaabc9664232180185db726ba7b2a6b542b748546e3c7ec16b28a6b3bb4c98217d21295a8a8fd55d92b0a2f9b303cc9"], 0x1, 0x1) r10 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) r11 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r11, 0x0) dup2(r8, r11) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000680)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r7, 0x80003) sendfile(r1, r7, 0x0, 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x8, 0x0, 0x1000000000000000}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x3}}, 0xe8) [ 97.062626] loop3: p43 start 1854537728 is beyond EOD, truncated [ 97.069716] loop3: p44 start 1854537728 is beyond EOD, truncated [ 97.076826] loop3: p45 start 1854537728 is beyond EOD, truncated [ 97.083744] loop3: p46 start 1854537728 is beyond EOD, truncated [ 97.102223] loop3: p47 start 1854537728 is beyond EOD, truncated 12:48:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489192572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8042) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') prctl$PR_SET_FPEMU(0xa, 0x3) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x184, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x65dc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x14}, 0x1ff}, {0xa, 0x4e22, 0x3, @remote, 0x80000001}, 0x40, [0x6, 0xb06, 0x1f, 0x9, 0xfffff553, 0x2, 0x6, 0x9]}, 0x5c) r6 = socket$inet6(0xa, 0x2, 0x0) dup3(r6, r2, 0x0) sendmmsg$inet(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 97.116860] loop3: p48 start 1854537728 is beyond EOD, truncated [ 97.125256] loop3: p49 start 1854537728 is beyond EOD, truncated [ 97.142543] loop3: p50 start 1854537728 is beyond EOD, truncated [ 97.149793] loop3: p51 start 1854537728 is beyond EOD, truncated [ 97.166897] loop3: p52 start 1854537728 is beyond EOD, truncated [ 97.174567] loop3: p53 start 1854537728 is beyond EOD, truncated [ 97.180880] loop3: p54 start 1854537728 is beyond EOD, truncated [ 97.194423] loop3: p55 start 1854537728 is beyond EOD, truncated 12:48:04 executing program 0: creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x3004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, 0x0, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffffd, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) setsockopt$packet_int(r3, 0x107, 0xc, 0x0, 0x0) r5 = accept(r3, &(0x7f0000000000)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @remote, @rose, @netrom, @default, @null]}, &(0x7f0000000200)=0xdf1e586eda983c74) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1184200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x4, 0x0}}, @FOU_ATTR_TYPE={0xa8, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0xfffffff1}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x1, 0x7}, 0xc) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f0000000000), 0x4) [ 97.200750] loop3: p56 start 1854537728 is beyond EOD, truncated [ 97.256752] loop3: p57 start 1854537728 is beyond EOD, truncated [ 97.264902] loop3: p58 start 1854537728 is beyond EOD, truncated [ 97.271283] loop3: p59 start 1854537728 is beyond EOD, truncated [ 97.279540] loop3: p60 start 1854537728 is beyond EOD, truncated [ 97.287217] loop3: p61 start 1854537728 is beyond EOD, truncated [ 97.314432] loop3: p62 start 1854537728 is beyond EOD, truncated [ 97.320725] loop3: p63 start 1854537728 is beyond EOD, truncated [ 97.331426] loop3: p64 start 1854537728 is beyond EOD, truncated [ 97.338040] loop3: p65 start 1854537728 is beyond EOD, truncated [ 97.344617] loop3: p66 start 1854537728 is beyond EOD, truncated [ 97.351003] loop3: p67 start 1854537728 is beyond EOD, truncated [ 97.360698] loop3: p68 start 1854537728 is beyond EOD, truncated [ 97.380107] loop3: p69 start 1854537728 is beyond EOD, truncated [ 97.397725] loop3: p70 start 1854537728 is beyond EOD, truncated [ 97.415336] loop3: p71 start 1854537728 is beyond EOD, truncated [ 97.421624] loop3: p72 start 1854537728 is beyond EOD, truncated [ 97.444143] loop3: p73 start 1854537728 is beyond EOD, truncated [ 97.450547] loop3: p74 start 1854537728 is beyond EOD, truncated [ 97.484090] loop3: p75 start 1854537728 is beyond EOD, truncated [ 97.490566] loop3: p76 start 1854537728 is beyond EOD, truncated [ 97.497238] loop3: p77 start 1854537728 is beyond EOD, truncated [ 97.512894] loop3: p78 start 1854537728 is beyond EOD, truncated [ 97.519216] loop3: p79 start 1854537728 is beyond EOD, truncated [ 97.545412] loop3: p80 start 1854537728 is beyond EOD, truncated [ 97.553390] loop3: p81 start 1854537728 is beyond EOD, truncated [ 97.559699] loop3: p82 start 1854537728 is beyond EOD, truncated [ 97.574204] loop3: p83 start 1854537728 is beyond EOD, truncated [ 97.580489] loop3: p84 start 1854537728 is beyond EOD, truncated [ 97.610799] loop3: p85 start 1854537728 is beyond EOD, truncated [ 97.624296] loop3: p86 start 1854537728 is beyond EOD, truncated [ 97.638589] loop3: p87 start 1854537728 is beyond EOD, truncated [ 97.651809] loop3: p88 start 1854537728 is beyond EOD, truncated [ 97.666187] loop3: p89 start 1854537728 is beyond EOD, truncated [ 97.679366] loop3: p90 start 1854537728 is beyond EOD, truncated [ 97.692178] loop3: p91 start 1854537728 is beyond EOD, truncated [ 97.699344] loop3: p92 start 1854537728 is beyond EOD, truncated [ 97.706286] loop3: p93 start 1854537728 is beyond EOD, truncated [ 97.712734] loop3: p94 start 1854537728 is beyond EOD, truncated [ 97.719261] loop3: p95 start 1854537728 is beyond EOD, truncated [ 97.725865] loop3: p96 start 1854537728 is beyond EOD, truncated [ 97.736192] loop3: p97 start 1854537728 is beyond EOD, truncated [ 97.742709] loop3: p98 start 1854537728 is beyond EOD, truncated [ 97.752136] loop3: p99 start 1854537728 is beyond EOD, truncated [ 97.758827] loop3: p100 start 1854537728 is beyond EOD, truncated [ 97.768314] loop3: p101 start 1854537728 is beyond EOD, truncated [ 97.775040] loop3: p102 start 1854537728 is beyond EOD, truncated [ 97.781646] loop3: p103 start 1854537728 is beyond EOD, truncated [ 97.788203] loop3: p104 start 1854537728 is beyond EOD, truncated [ 97.795063] loop3: p105 start 1854537728 is beyond EOD, truncated [ 97.802119] loop3: p106 start 1854537728 is beyond EOD, truncated [ 97.808867] loop3: p107 start 1854537728 is beyond EOD, truncated [ 97.817046] loop3: p108 start 1854537728 is beyond EOD, truncated [ 97.823576] loop3: p109 start 1854537728 is beyond EOD, truncated [ 97.830128] loop3: p110 start 1854537728 is beyond EOD, truncated [ 97.836848] loop3: p111 start 1854537728 is beyond EOD, truncated [ 97.852942] loop3: p112 start 1854537728 is beyond EOD, truncated [ 97.864168] loop3: p113 start 1854537728 is beyond EOD, truncated [ 97.873726] loop3: p114 start 1854537728 is beyond EOD, truncated [ 97.880442] loop3: p115 start 1854537728 is beyond EOD, truncated [ 97.887267] loop3: p116 start 1854537728 is beyond EOD, truncated [ 97.893932] loop3: p117 start 1854537728 is beyond EOD, truncated [ 97.900939] loop3: p118 start 1854537728 is beyond EOD, truncated [ 97.907880] loop3: p119 start 1854537728 is beyond EOD, truncated [ 97.914695] loop3: p120 start 1854537728 is beyond EOD, truncated [ 97.921414] loop3: p121 start 1854537728 is beyond EOD, truncated [ 97.928015] loop3: p122 start 1854537728 is beyond EOD, truncated [ 97.934627] loop3: p123 start 1854537728 is beyond EOD, truncated [ 97.941164] loop3: p124 start 1854537728 is beyond EOD, truncated [ 97.948300] loop3: p125 start 1854537728 is beyond EOD, truncated [ 97.954879] loop3: p126 start 1854537728 is beyond EOD, truncated [ 97.961420] loop3: p127 start 1854537728 is beyond EOD, truncated [ 97.968745] loop3: p128 start 1854537728 is beyond EOD, truncated [ 97.975574] loop3: p129 start 1854537728 is beyond EOD, truncated [ 97.982231] loop3: p130 start 1854537728 is beyond EOD, truncated [ 97.988818] loop3: p131 start 1854537728 is beyond EOD, truncated [ 97.995388] loop3: p132 start 1854537728 is beyond EOD, truncated [ 98.002078] loop3: p133 start 1854537728 is beyond EOD, truncated [ 98.008676] loop3: p134 start 1854537728 is beyond EOD, truncated [ 98.015240] loop3: p135 start 1854537728 is beyond EOD, truncated [ 98.021808] loop3: p136 start 1854537728 is beyond EOD, truncated [ 98.028388] loop3: p137 start 1854537728 is beyond EOD, truncated [ 98.035065] loop3: p138 start 1854537728 is beyond EOD, truncated [ 98.041591] loop3: p139 start 1854537728 is beyond EOD, truncated [ 98.048275] loop3: p140 start 1854537728 is beyond EOD, truncated [ 98.057087] loop3: p141 start 1854537728 is beyond EOD, truncated [ 98.070374] loop3: p142 start 1854537728 is beyond EOD, truncated [ 98.085547] loop3: p143 start 1854537728 is beyond EOD, truncated [ 98.098836] loop3: p144 start 1854537728 is beyond EOD, truncated [ 98.105428] loop3: p145 start 1854537728 is beyond EOD, truncated [ 98.112031] loop3: p146 start 1854537728 is beyond EOD, truncated [ 98.121717] loop3: p147 start 1854537728 is beyond EOD, truncated [ 98.130553] loop3: p148 start 1854537728 is beyond EOD, truncated [ 98.144125] loop3: p149 start 1854537728 is beyond EOD, truncated [ 98.157595] loop3: p150 start 1854537728 is beyond EOD, truncated [ 98.171672] loop3: p151 start 1854537728 is beyond EOD, truncated [ 98.186290] loop3: p152 start 1854537728 is beyond EOD, truncated [ 98.201088] loop3: p153 start 1854537728 is beyond EOD, truncated [ 98.214628] loop3: p154 start 1854537728 is beyond EOD, truncated [ 98.228008] loop3: p155 start 1854537728 is beyond EOD, truncated [ 98.242875] loop3: p156 start 1854537728 is beyond EOD, truncated [ 98.256316] loop3: p157 start 1854537728 is beyond EOD, truncated [ 98.271083] loop3: p158 start 1854537728 is beyond EOD, truncated [ 98.285388] loop3: p159 start 1854537728 is beyond EOD, [ 98.294682] audit_printk_skb: 60 callbacks suppressed [ 98.294694] audit: type=1400 audit(1574599685.134:35): avc: denied { create } for pid=3697 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 98.295176] audit: type=1400 audit(1574599685.134:36): avc: denied { write } for pid=3697 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 98.413987] truncated [ 98.418804] loop3: p160 start 1854537728 is beyond EOD, truncated [ 98.432214] loop3: p161 start 1854537728 is beyond EOD, truncated [ 98.442391] loop3: p162 start 1854537728 is beyond EOD, truncated [ 98.455870] loop3: p163 start 1854537728 is beyond EOD, truncated [ 98.462246] loop3: p164 start 1854537728 is beyond EOD, truncated [ 98.471620] loop3: p165 start 1854537728 is beyond EOD, truncated [ 98.478482] loop3: p166 start 1854537728 is beyond EOD, truncated [ 98.485238] loop3: p167 start 1854537728 is beyond EOD, truncated [ 98.491720] loop3: p168 start 1854537728 is beyond EOD, truncated [ 98.498414] loop3: p169 start 1854537728 is beyond EOD, truncated [ 98.505327] loop3: p170 start 1854537728 is beyond EOD, truncated [ 98.511779] loop3: p171 start 1854537728 is beyond EOD, truncated [ 98.518418] loop3: p172 start 1854537728 is beyond EOD, truncated [ 98.525103] loop3: p173 start 1854537728 is beyond EOD, truncated [ 98.531483] loop3: p174 start 1854537728 is beyond EOD, truncated [ 98.538243] loop3: p175 start 1854537728 is beyond EOD, truncated [ 98.544944] loop3: p176 start 1854537728 is beyond EOD, truncated [ 98.552193] loop3: p177 start 1854537728 is beyond EOD, truncated [ 98.558777] loop3: p178 start 1854537728 is beyond EOD, truncated [ 98.565318] loop3: p179 start 1854537728 is beyond EOD, truncated [ 98.571676] loop3: p180 start 1854537728 is beyond EOD, truncated [ 98.578261] loop3: p181 start 1854537728 is beyond EOD, truncated [ 98.584980] loop3: p182 start 1854537728 is beyond EOD, truncated [ 98.591337] loop3: p183 start 1854537728 is beyond EOD, truncated [ 98.598016] loop3: p184 start 1854537728 is beyond EOD, truncated [ 98.604894] loop3: p185 start 1854537728 is beyond EOD, truncated [ 98.611720] loop3: p186 start 1854537728 is beyond EOD, truncated [ 98.618315] loop3: p187 start 1854537728 is beyond EOD, truncated [ 98.624860] loop3: p188 start 1854537728 is beyond EOD, truncated [ 98.631231] loop3: p189 start 1854537728 is beyond EOD, truncated [ 98.637797] loop3: p190 start 1854537728 is beyond EOD, truncated [ 98.644369] loop3: p191 start 1854537728 is beyond EOD, truncated [ 98.650730] loop3: p192 start 1854537728 is beyond EOD, truncated [ 98.657316] loop3: p193 start 1854537728 is beyond EOD, truncated [ 98.663978] loop3: p194 start 1854537728 is beyond EOD, truncated [ 98.670344] loop3: p195 start 1854537728 is beyond EOD, truncated [ 98.676914] loop3: p196 start 1854537728 is beyond EOD, truncated [ 98.683456] loop3: p197 start 1854537728 is beyond EOD, truncated [ 98.689846] loop3: p198 start 1854537728 is beyond EOD, truncated [ 98.696404] loop3: p199 start 1854537728 is beyond EOD, truncated [ 98.703052] loop3: p200 start 1854537728 is beyond EOD, truncated [ 98.709423] loop3: p201 start 1854537728 is beyond EOD, truncated [ 98.715986] loop3: p202 start 1854537728 is beyond EOD, truncated [ 98.722364] loop3: p203 start 1854537728 is beyond EOD, truncated [ 98.729048] loop3: p204 start 1854537728 is beyond EOD, truncated [ 98.735667] loop3: p205 start 1854537728 is beyond EOD, truncated [ 98.742027] loop3: p206 start 1854537728 is beyond EOD, truncated [ 98.748600] loop3: p207 start 1854537728 is beyond EOD, truncated [ 98.755137] loop3: p208 start 1854537728 is beyond EOD, truncated [ 98.761702] loop3: p209 start 1854537728 is beyond EOD, truncated [ 98.768331] loop3: p210 start 1854537728 is beyond EOD, truncated [ 98.774920] loop3: p211 start 1854537728 is beyond EOD, truncated [ 98.781312] loop3: p212 start 1854537728 is beyond EOD, truncated [ 98.787973] loop3: p213 start 1854537728 is beyond EOD, truncated [ 98.794535] loop3: p214 start 1854537728 is beyond EOD, truncated [ 98.800891] loop3: p215 start 1854537728 is beyond EOD, truncated [ 98.807573] loop3: p216 start 1854537728 is beyond EOD, truncated [ 98.814196] loop3: p217 start 1854537728 is beyond EOD, truncated [ 98.826794] loop3: p218 start 1854537728 is beyond EOD, truncated [ 98.838305] loop3: p219 start 1854537728 is beyond EOD, truncated [ 98.844806] loop3: p220 start 1854537728 is beyond EOD, truncated [ 98.851251] loop3: p221 start 1854537728 is beyond EOD, truncated [ 98.857941] loop3: p222 start 1854537728 is beyond EOD, truncated [ 98.864331] loop3: p223 start 1854537728 is beyond EOD, truncated [ 98.870708] loop3: p224 start 1854537728 is beyond EOD, truncated [ 98.877126] loop3: p225 start 1854537728 is beyond EOD, truncated [ 98.883522] loop3: p226 start 1854537728 is beyond EOD, truncated [ 98.889869] loop3: p227 start 1854537728 is beyond EOD, truncated [ 98.896268] loop3: p228 start 1854537728 is beyond EOD, truncated [ 98.902618] loop3: p229 start 1854537728 is beyond EOD, truncated [ 98.909171] loop3: p230 start 1854537728 is beyond EOD, truncated [ 98.915548] loop3: p231 start 1854537728 is beyond EOD, truncated [ 98.921895] loop3: p232 start 1854537728 is beyond EOD, truncated [ 98.928297] loop3: p233 start 1854537728 is beyond EOD, truncated [ 98.935320] loop3: p234 start 1854537728 is beyond EOD, truncated [ 98.941663] loop3: p235 start 1854537728 is beyond EOD, truncated [ 98.948061] loop3: p236 start 1854537728 is beyond EOD, truncated [ 98.954441] loop3: p237 start 1854537728 is beyond EOD, truncated [ 98.960789] loop3: p238 start 1854537728 is beyond EOD, truncated [ 98.967182] loop3: p239 start 1854537728 is beyond EOD, truncated [ 98.973550] loop3: p240 start 1854537728 is beyond EOD, truncated [ 98.979897] loop3: p241 start 1854537728 is beyond EOD, truncated [ 98.986363] loop3: p242 start 1854537728 is beyond EOD, truncated [ 98.992704] loop3: p243 start 1854537728 is beyond EOD, truncated [ 98.999446] loop3: p244 start 1854537728 is beyond EOD, truncated [ 99.005830] loop3: p245 start 1854537728 is beyond EOD, truncated [ 99.012726] loop3: p246 start 1854537728 is beyond EOD, truncated [ 99.019278] loop3: p247 start 1854537728 is beyond EOD, truncated [ 99.025921] loop3: p248 start 1854537728 is beyond EOD, truncated [ 99.032283] loop3: p249 start 1854537728 is beyond EOD, truncated [ 99.039354] loop3: p250 start 1854537728 is beyond EOD, truncated [ 99.045981] loop3: p251 start 1854537728 is beyond EOD, truncated [ 99.052333] loop3: p252 start 1854537728 is beyond EOD, truncated [ 99.058710] loop3: p253 start 1854537728 is beyond EOD, truncated [ 99.065086] loop3: p254 start 1854537728 is beyond EOD, truncated [ 99.071427] loop3: p255 start 1854537728 is beyond EOD, truncated 12:48:05 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400), 0x1fd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = add_key$keyring(&(0x7f0000000000)='\x01\x00\x00\x00\x00\x00V\x0f', &(0x7f0000000080)={'\xa9\x00'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0xfffffffffffffffd, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r4, 0x0, 0xfffffffffffffdc1, 0x0) add_key$keyring(&(0x7f0000000900)='\xac\x82\x1e\x88?\xf5D\x9f', 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000d40)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x8, 0x70bd26}, 0x1c}}, 0x0) r6 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinu\x8c/avc/cache_threshold\x00', 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1d55) getegid() setgroups(0x0, &(0x7f0000000200)) r9 = getegid() setgroups(0x1, &(0x7f0000000200)=[r9]) getgroups(0x0, &(0x7f0000000240)) fsetxattr$system_posix_acl(r8, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="fac85aeaf927877416f2567301a1fe41f2cf991ae46aad1126bd929d0b65b8c0f95b1811e5592165afc194000029f5b93ab03a7bcc477b7cbf30125a60c89de0e3ef8100f80dee9326067701000000867f24a1017234ed9979518ad51a273bd15f26edd4843ba3fc4175abfae9f1d7000000006d74c650cf99c0f2dbaabc9664232180185db726ba7b2a6b542b748546e3c7ec16b28a6b3bb4c98217d21295a8a8fd55d92b0a2f9b303cc9"], 0x1, 0x1) r10 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) r11 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r11, 0x0) dup2(r8, r11) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000680)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r7, 0x80003) sendfile(r1, r7, 0x0, 0x8000fffffffe) 12:48:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489192572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8042) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') prctl$PR_SET_FPEMU(0xa, 0x3) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x184, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x65dc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x14}, 0x1ff}, {0xa, 0x4e22, 0x3, @remote, 0x80000001}, 0x40, [0x6, 0xb06, 0x1f, 0x9, 0xfffff553, 0x2, 0x6, 0x9]}, 0x5c) r6 = socket$inet6(0xa, 0x2, 0x0) dup3(r6, r2, 0x0) sendmmsg$inet(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:48:05 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010008", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x1, 0x4) preadv(r0, &(0x7f00000017c0), 0x10000000000000ee, 0x4800000000000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x414b) poll(0x0, 0x0, 0x0) 12:48:05 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1222e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) clone(0x8000000101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="73699dc03e3bbe737e08347bca826d85ab091e03805f4e0b120fb4bbafa80a72f99f76e396f3ca43a96dfff6e802bc815b0f8de707a621503c87f403259bb087e566ca98136ae6fe4f31244e74408f243872d0636dd915adcbd4ce896feb9218b0102137457359d2dd2d083f46a328e5651d07b643d7ba4fd5e2909f717e3472372db67b77d143fb245663e29367a22b7fda3b"], &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6(0xa, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) getegid() ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000001c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ftruncate(0xffffffffffffffff, 0x1) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000300000000000000", 0x58}], 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000380)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x100000000000002) setsockopt$packet_int(r5, 0x107, 0x0, &(0x7f0000000200)=0x80000000, 0x4) 12:48:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r3, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r5, 0x5421, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x6, 0x6, 0x1, 0xe277909bd96186a, 0xffffffffffffffff, 0x8, [], 0x0, 0xffffffffffffffff, 0x1}, 0x3c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5421, 0xffffffffffffffff) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 12:48:05 executing program 4: perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757847ed1e56cf3d1c7636dfd189b58052cfc9b92e855fe6a655fffe1787f9c46e76bb3ccaebe2fe317161b2343a6db94e74103b2c2bce1e83aba2a5867ca53cb814a1057fe9d8ce259203461b31c0a8b1b0c07b1672e800bb36196617aa3b38c34a010478d84fe0f11774f909a4a2b24d7268c892e73ffce8c1b06fa814778cf40988750a77ebdadc701b7f529a9e8a70def36fa22daa00f383d5caec8495d586b3"], 0x63) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x28404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x16c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0xfffffffffffffd9e, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) getsockopt$inet_mreq(r1, 0x0, 0x57, &(0x7f00000001c0)={@remote, @initdev}, &(0x7f0000000200)=0x8) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x101000) r4 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) read(r4, &(0x7f0000000280)=""/172, 0xac) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x5) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x5) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x40}) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 99.186845] audit: type=1400 audit(1574599686.014:37): avc: denied { create } for pid=3720 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:48:06 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = accept4(r0, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000100)=0x80, 0x81000) r2 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x100, r2, 0x100, 0x70bd26, 0x0, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6466}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x123}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xee1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x100}}, 0x800) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="a6b72abd7000ffdbdf25110000008000010044000200080002000000010008000300ff000000080001000c000000080003003f00000008000300060000000800010000000000080003000000000008000400060000002c000200080004000000000008000300020000000800040008000000080003000700000008000400ff0300000c00016e723000"], 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 99.279101] audit: type=1400 audit(1574599686.094:38): avc: denied { write } for pid=3720 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:48:06 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = accept4(r0, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000100)=0x80, 0x81000) r2 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x100, r2, 0x100, 0x70bd26, 0x0, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6466}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x123}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xee1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x100}}, 0x800) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="a6b72abd7000ffdbdf25110000008000010044000200080002000000010008000300ff000000080001000c000000080003003f00000008000300060000000800010000000000080003000000000008000400060000002c000200080004000000000008000300020000000800040008000000080003000700000008000400ff0300000c00016e723000"], 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:48:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1000) r6 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r6, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) lseek(r1, 0x203ffffd, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 99.316689] audit: type=1400 audit(1574599686.154:39): avc: denied { create } for pid=3743 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:48:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x4, 0x7f}, {0x1, 0x8000}], 0xffffffffffffffff}, 0x18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=""/23, 0x17) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x800, 0x0) utimensat(r1, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}, 0x100) gettid() recvfrom(r0, &(0x7f00000002c0)=""/115, 0x73, 0x10222, &(0x7f0000000340)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) 12:48:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489192572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8042) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') prctl$PR_SET_FPEMU(0xa, 0x3) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x184, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x65dc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x14}, 0x1ff}, {0xa, 0x4e22, 0x3, @remote, 0x80000001}, 0x40, [0x6, 0xb06, 0x1f, 0x9, 0xfffff553, 0x2, 0x6, 0x9]}, 0x5c) r6 = socket$inet6(0xa, 0x2, 0x0) dup3(r6, r2, 0x0) [ 99.317628] audit: type=1400 audit(1574599686.154:40): avc: denied { write } for pid=3743 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 99.329405] audit: type=1400 audit(1574599686.164:41): avc: denied { read } for pid=3743 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:48:06 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400), 0x1fd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = add_key$keyring(&(0x7f0000000000)='\x01\x00\x00\x00\x00\x00V\x0f', &(0x7f0000000080)={'\xa9\x00'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0xfffffffffffffffd, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r4, 0x0, 0xfffffffffffffdc1, 0x0) add_key$keyring(&(0x7f0000000900)='\xac\x82\x1e\x88?\xf5D\x9f', 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000d40)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x8, 0x70bd26}, 0x1c}}, 0x0) r6 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinu\x8c/avc/cache_threshold\x00', 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1d55) getegid() setgroups(0x0, &(0x7f0000000200)) r9 = getegid() setgroups(0x1, &(0x7f0000000200)=[r9]) getgroups(0x0, &(0x7f0000000240)) fsetxattr$system_posix_acl(r8, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="fac85aeaf927877416f2567301a1fe41f2cf991ae46aad1126bd929d0b65b8c0f95b1811e5592165afc194000029f5b93ab03a7bcc477b7cbf30125a60c89de0e3ef8100f80dee9326067701000000867f24a1017234ed9979518ad51a273bd15f26edd4843ba3fc4175abfae9f1d7000000006d74c650cf99c0f2dbaabc9664232180185db726ba7b2a6b542b748546e3c7ec16b28a6b3bb4c98217d21295a8a8fd55d92b0a2f9b303cc9"], 0x1, 0x1) r10 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r10, 0x0) r11 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r11, 0x0) dup2(r8, r11) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000680)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) sendfile(r1, r7, 0x0, 0x8000fffffffe) [ 99.434890] audit: type=1400 audit(1574599686.264:42): avc: denied { read } for pid=3720 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:48:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x4, 0x7f}, {0x1, 0x8000}], 0xffffffffffffffff}, 0x18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=""/23, 0x17) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x800, 0x0) utimensat(r1, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}, 0x100) gettid() recvfrom(r0, &(0x7f00000002c0)=""/115, 0x73, 0x10222, &(0x7f0000000340)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) 12:48:06 executing program 3: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlink(&(0x7f0000000140)='./file0\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x100000000000002) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x10000, 0x6]) [ 99.514734] audit: type=1400 audit(1574599686.354:43): avc: denied { create } for pid=3765 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 99.537713] audit: type=1400 audit(1574599686.364:44): avc: denied { write } for pid=3764 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:48:06 executing program 2: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0xd412}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x6, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0xffffffa8}]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x100000000000002) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x184, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x65dc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) epoll_