Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 10.856257] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 11.670735] random: crng init done Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.22' (ECDSA) to the list of known hosts. 2019/11/20 16:48:45 fuzzer started 2019/11/20 16:48:47 dialing manager at 10.128.0.26:35649 2019/11/20 16:48:47 syscalls: 1395 2019/11/20 16:48:47 code coverage: enabled 2019/11/20 16:48:47 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/11/20 16:48:47 extra coverage: extra coverage is not supported by the kernel 2019/11/20 16:48:47 setuid sandbox: enabled 2019/11/20 16:48:47 namespace sandbox: enabled 2019/11/20 16:48:47 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/20 16:48:47 fault injection: kernel does not have systematic fault injection support 2019/11/20 16:48:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/20 16:48:47 net packet injection: enabled 2019/11/20 16:48:47 net device setup: enabled 2019/11/20 16:48:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/20 16:48:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 16:49:26 executing program 0: chmod(&(0x7f0000000000)='./file0\x00', 0x92) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000080)={0x4, 0x4, {0xf5, 0x3, 0x1, {0x9, 0x3}, {0xfa1, 0x3ff}, @period={0x5b, 0x101, 0x3, 0x2, 0xffff, {0x7, 0x7, 0x0, 0xfbff}, 0x9, &(0x7f0000000040)=[0x7, 0x4, 0xe70d, 0x80, 0x3ff, 0x8000, 0x7fff, 0xfeff, 0x6]}}, {0x23acaec58497c3d1, 0x8000, 0x4, {0x8, 0x2}, {0x5, 0x4}, @const={0x3, {0x477, 0x9, 0xe9d2, 0x9}}}}) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) fsync(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400, 0x0) write$P9_RATTACH(r1, &(0x7f0000000180)={0x14, 0x69, 0x1, {0xef, 0x2, 0x6}}, 0x14) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/248}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)={'syz0', "eebcec69132b39e6da610b83c782b60715012ac44d572bfbfd7678d7a72ee999d939e3c5f0e0b712eca907d1eaa25056f2a03806c87e7bf54f57a6aef6ca55238c920bd870f11b52ef7f5178eab900d6f43a0482e71f5dd8ce38e58fb826fa0a507fcbab4630644a3b8e20bbbbe64721d8c14de668a015631c4d3dbaf0d3afb27ecfceafc4cbe7d23b6478"}, 0x8f) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) fchownat(r1, &(0x7f0000000440)='./file0\x00', r3, r4, 0x800) r5 = dup(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000640)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mreqsrc(r2, 0x0, 0x34, &(0x7f0000000680)={@empty, @multicast2, @broadcast}, 0xc) creat(&(0x7f00000006c0)='./file0\x00', 0x81) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={0xffffffffffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x138, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x75f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xda43}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffe, @ipv4={[], [], @empty}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4a1d, @rand_addr="586b6dcbf95e8d3933b04637917792ad", 0x2}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x400c9}, 0x2002a80c) getsockopt$netlink(r5, 0x10e, 0x8, &(0x7f0000000980)=""/204, &(0x7f0000000a80)=0xcc) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000ac0), 0xc) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000b00)=r8) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/null\x00', 0x87290ab938a275bc, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@empty}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000dc0)=0xe8) r11 = socket$unix(0x1, 0x5, 0x0) splice(r2, &(0x7f0000000e00)=0x400, r11, &(0x7f0000000e40)=0x2, 0x0, 0xe) r12 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f0000000e80), &(0x7f0000000ec0)=0x8) 16:49:26 executing program 1: setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "982397837741e47149a1ba769c480254d3e3c596"}, 0x15, 0x1) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r0, 0x8f, 0xde}, 0x0, &(0x7f0000000180)="e8503689a40a92397424ea5c205beb61922c3ab339091e1c56bcf494a969bd6639811248f4272184532df641bdcf374fabc1f16e49f84ec9dba67e9a0aef2baccd6e3bd6cd5dcfda51c7a31a2360c06d98b230225c330334031f28ee4271b1e9400124a6600f62e526d0aa2f8059cdd30af835d9fc6237cdd8d2ff4714cdee63bb82a67dbc0cea08366f05081a308b", &(0x7f0000000240)=""/222) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/netfilter\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000480)={@mcast1, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80270882}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=@delqdisc={0x194, 0x25, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {0x8, 0xfd726598c664acfc}, {0xf}}, [@TCA_RATE={0x8, 0x5, {0x40, 0x9}}, @TCA_RATE={0x8, 0x5, {0xb6, 0x4}}, @qdisc_kind_options=@q_multiq={{0xc, 0x1, 'multiq\x00'}, {0x8, 0x2, {0x7}}}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x130, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x10001, 0x7ff, 0x1, 0x4, 0x6, 0x8}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f, 0x4, 0x7f, 0x1a, 0x17, 0x1f, 0x4}}]}}, @TCA_RATE={0x8, 0x5, {0x9, 0x20}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x800) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000740)='/dev/keychord\x00', 0x3810a4, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x5600000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0xe8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/mls\x00', 0x0, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000940)='security.ima\x00', &(0x7f0000000980)=@sha1={0x1, "acbfceb7ddabbf4456314ae3a42827afc6282c98"}, 0x15, 0x1) syz_open_dev$rtc(&(0x7f00000009c0)='/dev/rtc#\x00', 0x2, 0x100) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000a00)={0x5, 0x6, 0xffff, 0x1, 0x6}) r6 = fcntl$dupfd(0xffffffffffffffff, 0xc0a, 0xffffffffffffffff) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000a40)='syz') r7 = accept4(0xffffffffffffffff, &(0x7f0000000a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000b00)=0x80, 0x0) recvfrom$inet6(r7, &(0x7f0000000b40)=""/190, 0xbe, 0xb5c4e99be883fbb5, &(0x7f0000000c00)={0xa, 0x4e23, 0x7, @rand_addr="74ed879e06c7633194c854202a6686f5", 0x1}, 0x1c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001000)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x90828800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x2d8, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x789f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc94c, @dev={0xfe, 0x80, [], 0x1c}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @rand_addr="c3e0dea13ea9bb3ae0d77cf3a6057d91", 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb204}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe341}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33e7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x190}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8cc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r9 = syz_open_dev$mice(&(0x7f0000001040)='/dev/input/mice\x00', 0x0, 0x75b193b1487fb589) linkat(r9, &(0x7f0000001080)='./file0\x00', r1, &(0x7f00000010c0)='./file0\x00', 0x2000) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001100)={{{@in6, @in=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001200)=0xe8) r10 = syz_open_dev$loop(&(0x7f0000001240)='/dev/loop#\x00', 0xee, 0x200900) ioctl$HDIO_GETGEO(r10, 0x301, &(0x7f0000001280)) r11 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x140, 0x0) ioctl$RTC_EPOCH_SET(r11, 0x4008700e, 0x5) r12 = open(&(0x7f0000001300)='./file0\x00', 0x200, 0x108) setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f0000001340)={@rand_addr="34ab2b49db26b4efdfcf37b6c339cf38", r2}, 0x14) accept(r5, &(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001400)=0x80) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000001440)='/dev/zero\x00', 0x400000, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001480)=r14, 0x4) 16:49:26 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0xfff, 0x4) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001880)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001900)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0x84, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x200680a0}, 0x80) r4 = socket$inet(0x2, 0x4, 0x3) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000001a80)=0x7, 0x4) r5 = dup2(r4, 0xffffffffffffffff) write$9p(r5, &(0x7f0000001ac0)="86bbf2440bf9553bed3ac52a5f931ab348eedcfe746e072dd0f3e448f3d3919f", 0x20) getresgid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)=0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000001bc0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001c40)={'ifb0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x180008}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)=@newtclass={0x38, 0x28, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x3, 0x2}, {0x4}, {0x4, 0xf}}, [@TCA_RATE={0x8, 0x5, {0x1, 0x81}}, @tclass_kind_options=@c_red={0x8, 0x1, 'red\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x8044) syz_open_dev$rtc(&(0x7f0000001d40)='/dev/rtc#\x00', 0xffffffffffffffe1, 0x40) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000001d80), &(0x7f0000001dc0)=0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)) r9 = getuid() r10 = geteuid() r11 = getegid() lsetxattr$system_posix_acl(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)='system.posix_acl_access\x00', &(0x7f0000001ec0)={{}, {0x1, 0x7}, [{0x2, 0x3, r0}, {0x2, 0x6, r0}, {0x2, 0x3, r9}, {0x2, 0x4, r10}], {}, [{0x8, 0x1, r11}, {0x8, 0x2, r6}], {0x10, 0x2}, {0x20, 0x6}}, 0x54, 0x2) ioctl$TCSBRKP(r7, 0x5425, 0x9e3d) exit(0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000001f40)='TIPCv2\x00') ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000001f80)={0xbfb, {0x8, 0x5, 0x614, 0x401, 0xddd}}) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000001fc0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002000)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000002100)=0xe8) fchown(r2, r12, r11) r13 = accept(0xffffffffffffffff, &(0x7f0000002140)=@ethernet={0x0, @random}, &(0x7f00000021c0)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002300)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000002400)=0xe8) sendmsg$nl_route(r13, &(0x7f00000024c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)=@getstats={0x1c, 0x5e, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, 0x3}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c80c8}, 0x4040080) 16:49:26 executing program 2: 16:49:26 executing program 3: 16:49:26 executing program 4: syzkaller login: [ 62.649367] audit: type=1400 audit(1574268566.399:5): avc: denied { sys_admin } for pid=2083 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 62.751186] audit: type=1400 audit(1574268566.499:6): avc: denied { net_admin } for pid=2088 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 63.026225] audit: type=1400 audit(1574268566.769:7): avc: denied { create } for pid=2089 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 63.049808] audit: type=1400 audit(1574268566.769:8): avc: denied { write } for pid=2091 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 63.061002] audit: type=1400 audit(1574268566.809:9): avc: denied { read } for pid=2088 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 63.150375] audit: type=1400 audit(1574268566.899:10): avc: denied { sys_chroot } for pid=2091 comm="syz-executor.4" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 63.175979] audit: type=1400 audit(1574268566.919:11): avc: denied { associate } for pid=2088 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 16:49:27 executing program 4: 16:49:27 executing program 2: 16:49:27 executing program 1: [ 63.275608] audit: type=1400 audit(1574268567.019:12): avc: denied { setopt } for pid=2234 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 16:49:27 executing program 4: 16:49:27 executing program 2: 16:49:27 executing program 1: 16:49:27 executing program 4: 16:49:27 executing program 3: 16:49:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000180)={0x0, 0x8, 0x4, 0x0, 0x6}) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x4000000000020009) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) r8 = fcntl$dupfd(r6, 0x406, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept$inet6(r8, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 16:49:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6d7d}, 0x0, 0x0, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x20002000, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) syz_open_pts(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000480)="025cc83d6d345f8f762070") r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="5401000010001307000000000000000000000000000000000000000000000000ffffffff000000000000009226df4010a8370f7fcdf4e4000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c0017000000000000000000000000000000000000ff000000480001006d643500"/248], 0x154}}, 0x0) preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000700)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r8, &(0x7f0000000700), 0x31f, 0x10400003) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = gettid() setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') r12 = syz_open_procfs(r10, &(0x7f00000002c0)='net/anycast6\x00') ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0xa, 0xffff, 0x78, 0xffff, 0xfff}) setsockopt$inet_MCAST_LEAVE_GROUP(r11, 0x0, 0x2d, &(0x7f0000000380)={0xf0, {{0x2, 0x4e22}}}, 0x84) ftruncate(r12, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x4000)=nil, 0x3000}, &(0x7f0000000300)=0x100000134) sendfile(r12, r11, &(0x7f0000000040), 0x10001) read(r12, &(0x7f00000004c0)=""/252, 0xfc) dup2(r11, r3) 16:49:27 executing program 2: 16:49:27 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x105, 0x2, 0x2000}, 0xffffffffffffffc7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) r9 = request_key(&(0x7f0000001480)='bla\xff\xff\xff\xffst\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='vb\x7fx0\xeb', 0xfffffffffffffffd) r10 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)="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", 0x1000, 0xfffffffffffffffd) r11 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000001340)="93", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001380)={r9, r10, r11}, &(0x7f00000013c0)=""/42, 0x2a, &(0x7f0000001440)={&(0x7f0000001400)={'ghash-generic\x00'}}) 16:49:27 executing program 3: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) clone(0x2102801ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000102, 0x9032, 0xffffffffffffffff, 0x0) 16:49:27 executing program 4: clone(0x203102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) lseek(r1, 0xd5, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newspdinfo={0x20, 0x24, 0x400, 0x70bd2c, 0x25dfdbff, 0x1f, [@mark={0xc, 0x15, {0x35075d, 0xdc3e}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000180)={'eql\x00', {0x2, 0x4e20, @remote}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x2, 0x0, 0xaf2, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x3) write(0xffffffffffffffff, &(0x7f00000001c0)="a67b7cecb5cd1d0fbd1de3ffebad02bdcf805b6bc98e274a828666f885647479b4a0a98b5189bc792493d237dbb8a4e541e86056", 0x34) write$nbd(r4, &(0x7f00000000c0)={0x67446698, 0x1, 0x0, 0x4, 0x2, "1af2313c7242e81fb8053d1d1193d7a04c343b642ecd75fbf63eedf1741a1ca22d572c1561f34ddbb91aeb6393e2acd1172f04f5ff9d36a1581be0e9cd49c7144be26f4ceba374c058150642a1bd33423d0eb872"}, 0x64) 16:49:27 executing program 2: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80c00) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x0, 0xff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0xb309a17e871cc587}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2a4000, 0x190) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000380)=@md5={0x1, "86ee741e65596c5d12183d4e4a409aa4"}, 0x1, 0x2) ioctl$FIBMAP(r1, 0x1, &(0x7f00000004c0)) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494", 0x2d}, {&(0x7f0000001c40)}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a34689f07e340cec408be4e862cc03003e", 0x20}, {&(0x7f0000000b40)="70799d7f93aee25740609238367b30d5bd2da4a8a782f1e2bfe6e09ea5587d2488139bce0b6720aa3beec624a66fba665935593f143410e814194574d6c5caa5a0a643a77a6837f10a97664379ac508c2c604e84b914cca11d7c13c7516775c47b89811abd1b86bdc06b4c2df598cc7f7707a1c0400e52e98972dcc961b5a697d45539c7b8f008ed", 0x88}, {0x0}, {&(0x7f0000000f40)="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", 0x2e2}], 0x4}}], 0x2, 0x80) sendto$inet(r3, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) [ 64.079478] audit: type=1400 audit(1574268567.829:13): avc: denied { dac_override } for pid=2308 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 64.092870] audit: type=1400 audit(1574268567.839:14): avc: denied { net_raw } for pid=2307 comm="syz-executor.1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 64.120257] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. 16:49:28 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000800)=ANY=[], 0x0) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}, {0x0, 0x2be}], 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) [ 64.241177] tc_dump_action: action bad kind 16:49:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcf") ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x101, 0x0, 0x1, 0xffffffffffffff9c}) creat(&(0x7f0000000180)='\x00', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) open(&(0x7f0000000440)='./file0\x00', 0x400, 0x4) clone(0x1075cd000, &(0x7f00000006c0)="a541dcea4c55c8099050d30eb7e23aa7ee75cc6a3decdf315017f62ada2556fb008c033de1103e447902fd0e266492b6864a90891e73af5353d0a8a3fa215f7551b0bf502f7bc09f635f2fa79a337f299d29bbd5255ecf51432136ffea6d9655c49fb08f785899454dce16fb42a11a49726940e4a980432a2a79b2e372e7b919bd405fbee0b61b2b14663bb1c3d6b6bb2346f8c5f8bbd3f600301e37be06fb6026d6c13d962254", 0x0, 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(0xffffffffffffffff, 0x8, r2) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r7}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setns(r6, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) r9 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, r9) r10 = socket$inet(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0xffffffffffffffff, r11) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r9, r11, r12) 16:49:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xc2, 0x1, 0x3, "827661b4082fcf99bf960c89046efc89", "74ef5cb5b1cda0a1cb2877c663a9b03d0f81f106e7cf5be8ad4b65307d5aa75c6d8a1b79fdfc9b5c28bc9c98531e2c09db326a760811cc6eafbefc5b8d2f6e4ba17d836e70443f20f31b632bb49ab15826e43a172688c75fab2dd3f01b7a415bb2cf2abec8d91ae9a822cb5f4bf0bdb43004f547bdcbe71ff1b3120e832951cf34c7deac3ff602fa664a74eb23437b545b827116cf8cc1267e8301894485f6930ea366bf013f35112488f1ee94"}, 0xc2, 0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) fadvise64(r2, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) geteuid() [ 64.415797] tc_dump_action: action bad kind 16:49:28 executing program 2: socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setuid(0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @dev}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000240)) r5 = add_key$keyring(&(0x7f0000000300)='^eyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)=@builtin='builtin_trusted\x00') r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x2a) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000080), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="d80000001900310e0000000000000000ac1c00010026f0440900000000000000008100000000000000ea3759a400000000000000000000000000000000000400d1208393670865d22622ba6a133e4fdfc9ed6c99c6e082e4a1d77a84055157d4b666b62e5bdd413ea3f1b69bb2abe35d55464970ee0598e7a6a1e97ee4000000f22750a672a61638edb80cfe8f4f412c9baa38403f854d89bfdc61a14610bc9df5e73a3c355d43d092db88fcddb6384cc341d802a44325c887918c1160861722a0de459638af7da2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff0000000000000000001d55942398f1e0218ba07a4da0a3c535fd8d1f86aa46f677f32d240f3a21619b0f5ad6c6260efeedb0cba8a6eca9ea56e6db6df9d920854ad7332cb4c78c9f4400ce9272d440623025c96724de850aa649e9"], 0x4}, 0x8}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000003280)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'erspan0\x00', 0x1000}) sendto$inet(r2, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3d2) setsockopt$sock_int(r2, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 16:49:28 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='\x00\xff\x01\x00\x00\x00', 0x82011, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) creat(&(0x7f0000000140)='./file0\x00', 0x0) 16:49:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x29, 0x0, 0xb9) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040)={0x7}, &(0x7f0000000100), &(0x7f0000000180)={r3, r4+30000000}, 0x8) 16:49:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x103) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RWALK(r5, &(0x7f0000000140)={0x16, 0x6f, 0x2, {0x1, [{0x20, 0x4, 0x2}]}}, 0x16) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) dup(0xffffffffffffffff) r7 = memfd_create(&(0x7f00000001c0)='#! ', 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='#\n'], 0x2) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16:49:28 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb7ae, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x40a400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="5401000010001307000000000000000000000000000000000000000000000000ffffffff0000fe9c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c0017000000000000000000000000000000000000000000ff000000480001006d643500"/268], 0x154}}, 0x0) write$binfmt_script(r3, 0x0, 0x2a9) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x203be9be0e639dd, 0x0, 0x0, 0xffffffffffffffd7) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xffffff52) 16:49:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1800007, 0x11, r3, 0x10000) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) accept4$unix(r6, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0xabe5a1c968788351) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 16:49:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x5, 0x3e8}, 0x100) open(&(0x7f00000000c0)='./file0\x00', 0x1201, 0x24) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x79e05ad0) shutdown(r0, 0x1) [ 65.135906] device lo entered promiscuous mode 16:49:28 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@multicast1, 0x10000000, 0x0, 0x0, 0x5}}, 0xe8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0xbb2442898c5a8019, 0x24) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 16:49:29 executing program 4: r0 = socket$packet(0x11, 0x20000000000003, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000040)=0x10000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001000130700000000000000000000000000000000000000000000faffff000000002a1922275175e30000000046e5d88ed5d100"/67, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c0017000000000000000000000000000000000000000000ff000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x154}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x1) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) [ 65.261702] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. 16:49:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x4, {0xa, 0x4e22, 0x81, @remote, 0x3}}}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x20}, {0x80000006}]}, 0x10) socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000180)) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents(r4, &(0x7f0000000040)=""/253, 0xfd) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="abce2a10d6c9b57a34f21c8a552772f3e44e1db5fbd44a31594352a6b9e4c603d4a20500000000000000e1df147bab5c60da7cd3d9460078b59d53f6a17fda0cd341da84e7391513c624c1e2cdf1fde9d98375647a96bbc97c99423e751fc1bd479f8869539f918967c679d51f6345a57ceb6ae1abe43751b69400f53b0eaeb1c16e720f758511267ea57877c4e6710575ac857b02823470d2c1329d83067773126c120b81e6a75a5c981cd7b1b02e7539d9eacb549e86b503307717ef9b5217c8d2cb0e156a74c33d1021ef8f1a566bdb5b32d0b0c931a738382cd8b8ad22446a10b9de43849fd43e24eee9113024e7123a612c01881ce1e0785eb6e49d41b5780950ccb1d1a292ede1bc6d6b669c413c4aabecd71d32c76300"/291, @ANYRES16=r6, @ANYBLOB="040029bd7000ffdbdf25020000000c200110080009002b0000001800010008000200870000000c0007002000000005000000080004003100000054000200080004000100000008000900210800000800030004000000080005004000000008000300020000000800050065090000"], 0x3}, 0x1, 0x0, 0x0, 0x30000000}, 0x801) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x42400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)={0x128, r6, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x9fee2aad287305cc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x6c65991dc333d6de}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="09f89eaa1d216a9e0d02e0978a7af49c"}]}]}, 0x128}}, 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000900", @ANYRES16=r6, @ANYBLOB="00022abd7000fedbdf25110000000800050004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) [ 65.332307] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. 16:49:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x51, 0xffff, 0x1, {0x9, 0x3}, {0xfbff, 0x7ff}, @cond=[{0x1, 0x9, 0x8, 0x40, 0x0, 0x40}, {0x1f, 0x8000, 0x800, 0x8, 0x9, 0x2}]}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x1) 16:49:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0017fdeb685dee7bea4941b50c605a772af84c0538300133daa6684a5bd030cea791503e3fffa1927f004c70673295736ba4115faad6a3ca545daa7bc882f011ceddd5a8e2654a5af1d0902ae31f5b504c5a4662649d8b45140d9b7f556d0ed3", 0x60}, {&(0x7f0000000340)="ccc064d454bf8d14fbd303e83e7848cff718", 0x12}, {&(0x7f00000004c0)="0539b5003fb76cea7cac97c3b6f1d768a48ef9aaab8369919d3eda033eddcfe3e6839accea2f4c67997c58f04b66d61edba1ada5486844035170af2d4e0baff93ddc9394682a92c7ed441d149a10b5b92af22ed7234cbfad470058fba5f15b413be6d39dc6d4cbfa0879d3e3c0566f98d8a2e8ec203d7796ebed9742c5ee06b8a6c80f8d8c78641b99a6df62ee28c4e4a9d334f7c7c4e508d752cc0329163ce30db12de085f2e072dbfe287da56c814faba5ff80f944f42fbe980b5cb5f3bd", 0xbf}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c40)="a4b4523de7fc7354cb7fae0c522c4182034991bb78c9fd4d2cd7e9c4c8ce3ce8a858a65d6e5b6cca94b92af406e437fe3e941125d3a211e7c137ec1624b781df9cf4a7571ac5c020d11615b347b8bd3c1280d83346fb133ccff206bb107225b99e31752fec3a71e8", 0x68}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b00)="910b2945cc78686ecf55aaced5eb172d9dbb9f56d0c7df06497cc674", 0x1c}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000000e40)="be74d9ffd4c3ed2a218dc5e8de1a250288d5d033f344f1f2ca8836a7a59e63c11d1e115a6afdffc8d099440e2d2764bfe70229a0ebb365f68b6eb819b3373486ed9adb39b7134f59d675bc635e9288b19526305cc03b832d15e60f3d93e717427ebaf3ecbd3e2d9c1acb5ee1a0248b19b0bcccc3d6138e94ff829f8f7ac878d992c05e52", 0x84}], 0x3}}], 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x400, 0x4) fallocate(r1, 0x0, 0x0, 0x8020003) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61d", 0x54, 0x0, 0x0, 0x0) 16:49:29 executing program 4: getrusage(0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f00000000c0)=@isdn={0x22, 0x9, 0xc, 0xd, 0x2}, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="d4dbbf9a9dbc5394db1698f5667c4e59e46d00370b5276863fb6d1cd8d89e8304b5bcf40037a2a74e23e96b9f2e95352095cdbe840f8a5d99ed6816d3fae93483082588e6b97ec570288c4e67af5416d0a3f1534a5d79aada25d0b57e8e789ed1bc201615d9391d8018581e4c05a883317841bd84098a8b1878fd449cd749e9461dfc945c4d3f0735b798155f2f6e153c7a2943a31bb85dbda80ffd18d0930716eed50a82ba798a64a297dc12e664245192b7905e9eec13405b31ff030777b0091af11984e25bede5df2bb5e48bf"}, {&(0x7f0000000140)="b038973c8549d48624c03790d38a3cf3b4856537e3ee1a74a99f2f2fc635"}, {&(0x7f0000000180)="53c13d3988dd8ed03b24f1c6eaf816a48268420e5da893df3f99c0c3c13d522003b7cd0bc9110603766624877b680b47aad7eef9678afbf4937d1684c45089d08e5e8f5bdc909a02ea9986ad96cd95e5b1f3b183d412533cb32a384c15a683479168081b122c891ac8c4d8fed678fb15df0c"}, {&(0x7f0000000340)="956e84bcc9f87594642643c03dd94b4fb81e4b6fcdbcdb3796e674fb1abff0cf92a4eb827cb57b9615a280f07d5d026b0a3ccafd3ff7453fffbbe4bc302ccba3bfd948e39b92"}, {&(0x7f00000003c0)="9b66c6b546b1685a040f7f"}], 0x0, &(0x7f0000000480)=[{0x0, 0x114, 0x9, "760bce859723a45cfa89d55e3bae72603dd0260f360dc03360f6f58959c7524903538f6997cda92b91e6be9d56c525352d784f2b028a1465a7049c6ff4be8ef383819a27039e6d2dda8d5c7bd422b9a3c5f2449e7267e86183de4ec0dc4d42ee37b8891a0f31b2adeb4fb2980302d94bef93cfc2d9c7f2582da299ea1720aaea6a578a38311753da52704de43e2740dcd1221abf43531bea8242e22f245bb0ee42210f2e412658bbe6fc4dea5fde83854b3f514952e0a6dfc0f683c3b803bf32f7b40461b7102d41f2c25d3c1365ca6d692559c12a49c3c797fb0e5c15495a6d9301b1773538b2493fd1186108c7"}, {0x0, 0x112, 0x3, "cd9cc82448d78969df86f440eafa1dfef1095843eaf65b177d4b549bf936"}]}}], 0x420, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16:49:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/validatetrans\x00', 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000180012000800010076274b725d00020008000100", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LABEL={0x14, 0x3, 'bridge_slave_1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7}}]}, 0x40}}, 0x0) 16:49:29 executing program 2: clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000000)='keyring\'\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x2, {0xc0, 0x1, 0x4}}, 0x14) fcntl$setlease(r0, 0x400, 0x0) [ 65.710184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.733650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 16:49:29 executing program 4: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) sched_setscheduler(r3, 0x5, &(0x7f0000000180)) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e21, @rand_addr=0x3ff}}, 0x0, 0x401, 0x0, "36fdbdff4b9fe693f621afae12376d3f0c3e5ca6925b8deaa927b00472bd64bae7a63d9d6ddf2a12d250f65ec40df2176cdb80a91790fd3f625a7df8628fee5f5c887729015949ca26d6285ce272e411"}, 0xd8) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6c0000007e0100000055000000000000000303000000040000000000000000000000000000000100160000000000001c000010002fa9656c696e75782f706f6c69637975782f706f6c"], 0x49) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') ioctl(r0, 0x8, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) ioctl$TCSETSW(r4, 0x5403, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) ioctl$TIOCGSID(r9, 0x5429, &(0x7f00000000c0)=0x0) getpgid(r10) getxattr(&(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000800)=""/159, 0x9f) sendfile(r1, r4, &(0x7f0000000080), 0x9001) [ 65.862378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12152 sclass=netlink_route_socket pig=2452 comm=syz-executor.4 16:49:29 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r0, 0x2040000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000800)={0x2, 0x6, {0x0, 0x39, 0x0, 0x1f, 0xb, 0x67, 0x2}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') socket(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x101}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000004c0)=@v2={0x2, @aes128, 0x0, [], "d022c95fb5c71b56eeac3f22edbc8057"}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x400c008}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(0x0, &(0x7f0000000580)) r7 = socket(0xa9644b21f8da1bfb, 0xa, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000540)='./bus\x00', 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x20000481, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r9, 0x0, r8, 0x0, 0x1000000000000003, 0x0) sendto$packet(r9, &(0x7f0000000300)='\x00', 0x1, 0x3ffffff, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x6100) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1a27, 0x0, 0x0, 0x4}}, 0x110) 16:49:29 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002dc0)={@loopback, @dev, 0x0}, &(0x7f0000002e00)=0xc) r2 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setreuid(r2, r3) ioprio_get$uid(0x3, r2) r4 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r6}, 0x14) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, r6}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e40)=@allocspi={0x1cc, 0x16, 0x20, 0x70bd26, 0x25dfdbff, {{{@in=@multicast2, @in6=@local, 0x4e22, 0x0, 0x4e23, 0x7, 0x2, 0x0, 0xa0, 0x88, r1, r2}, {@in6=@remote, 0x4d5, 0x6c}, @in=@multicast2, {0x5, 0x9, 0x8, 0x1, 0xec6, 0x2, 0x1f, 0x7fff}, {0xffffffffffffffff, 0x2, 0x101, 0x4}, {0x2, 0x8, 0xf7e}, 0x70bd2b, 0x3505, 0x0, 0x3, 0x5, 0x48}, 0x18, 0x3434}, [@ipv4_hthresh={0x8, 0x3, {0x1a, 0x8}}, @extra_flags={0x8, 0x18, 0x4}, @offload={0xc, 0x1c, {r6, 0x1}}, @encap={0x1c, 0x4, {0x2, 0x4e20, 0x4e22, @in6=@empty}}, @ipv4_hthresh={0x8, 0x3, {0x2, 0x20}}, @migrate={0x88, 0x11, [{@in=@multicast1, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2b, 0x3, 0x0, 0x34ff, 0xa, 0xa}, {@in=@rand_addr=0x3, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2b, 0x4, 0x0, 0x3503, 0xb, 0x2}, {@in=@multicast2, @in6=@rand_addr="5163be9d7dab5d623f88aba6e4b16ab7", 0x0, 0x0, 0x0, 0x3503, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x7}]}, 0x1cc}}, 0x0) fchdir(r0) r7 = socket(0x0, 0x80002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x0, 0x8001002}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1", 0x1c) connect$netlink(r7, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) signalfd4(r7, &(0x7f0000000880)={0x7f}, 0x8, 0xc00) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000040)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r10 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r10, 0x2081fc) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8000fffffffe) bind$inet(0xffffffffffffffff, 0x0, 0x0) r12 = open(&(0x7f00000001c0)='./bus\x00', 0x141442, 0x0) r13 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x7}, 0x7) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x3, 0x4, 0x1, 0x7}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x323) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) syncfs(r9) r14 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r14, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000100)={0x0, r13}) 16:49:29 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0xffffffffffffffee) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0x0, "daf2c82ef0aaa7fc37bd440c2ea6599e24d66405bb48bcfa98288ee8607032d55e3c40d11ab81fef5bb7f7d17e688c345d496f6975ffe9d2ff6bb2e38910798fc7454ae92070dbaa7e5e92da22101700"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6}]}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x8}, 0x294) close(r0) 16:49:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x88, 0x0, r1}, {}, {0x0, 0x0, 0x3f}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffffffffffffff16) r2 = socket$inet(0x2, 0x80a, 0x0) r3 = socket$inet(0x2, 0x80a, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x486000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) r10 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r11, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents(r14, &(0x7f0000000040)=""/253, 0xfd) r15 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r15, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB='~\n\x00\x00\x00\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="040029bd7000ffdbdf25020000000c200110080009002b0000001800010008000200870000000c0007002000000005000000080004003100000054000200080004000100000008000900210800000800030004000000080005004000000008000300020000000800050065090000"], 0x3}, 0x1, 0x0, 0x0, 0x30000000}, 0x801) sendmsg$IPVS_CMD_NEW_DAEMON(r14, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x42400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)={0x128, r16, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x9fee2aad287305cc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x6c65991dc333d6de}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="09f89eaa1d216a9e0d02e0978a7af49c"}]}]}, 0x128}}, 0x1) sendmsg$IPVS_CMD_GET_DEST(r13, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x420b000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r16, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x0, 0x1}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r17}) r18 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3300200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getnetconf={0x34, 0x52, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r17}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x2d}, @NETCONFA_IFINDEX={0x8, 0x1, r19}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x30014010) getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000000)) 16:49:29 executing program 3: r0 = socket(0x10, 0x2, 0xc) r1 = socket(0x1000000010, 0x2, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) fsetxattr(r2, &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)='\xe0}\x00', 0x3, 0x1) write(r0, &(0x7f00000000c0)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104ff00f50400db077f000000f523fb98ed56335875fd8846543371b1a964e3056020585c9a67bd689205aa5731338bd1b961e6f55f4457cf14a00dec4eb28abef08794bd3e90b717b2f28dca4552b42ff4dd212a01a6ed756d7c9adb2b7e98cff45eba409a13d69b0c4606729964f94100b93db41983a3425c4716b9a4b6cac7e4763589232b874b6ed480c2a7ca11d6ab92a8af0c7233fd3c270a60a8772b38ff6936453f67ed17b590e5ce218815308587e664d67dd8a8fec6c078a646f88ad489c0e45411cfd0e4d79e949481497ec9f3406ec95c133c3250fd45d8a246646e932c82011914e9ec38ca6cdf929a374fd39730", 0x3) [ 66.026846] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 66.107768] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.132631] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.145938] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.155611] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 16:49:29 executing program 1: rt_sigreturn() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x2, 0x8eb, 0x0, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0xffffffffffffff75) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 16:49:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) r3 = dup2(r2, r1) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'bridge0\x00'}) r4 = socket(0x3, 0x3, 0x8) getsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000200)=""/1, &(0x7f0000000240)=0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) 16:49:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000a00ea1100000005000000", 0x29}], 0x1) 16:49:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) r1 = socket(0x4, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x10000000000000f, &(0x7f0000000240)="ff21b3d0", 0x4) bind(r1, &(0x7f0000000340)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xfffffffffffffd1a) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x2, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) io_setup(0x1002, &(0x7f0000000140)=0x0) io_submit(r4, 0x20000103, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2ad}]) 16:49:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x60020000) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80800, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0x0) 16:49:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002e0000004f000000000000009500140000000000b1d8be4c8c0cbb0d0fd475ce7717395c2dea1ef23cb8c97d0000009a3c9b1485606bf06c8b3e3c156753c1f31d0e2106c765924591cb9bf606b7c5bb4cf1543ba90460f05950d3c1a6b893c11d19cd302029a08febc942bd3b74ea36b5f026ceb012476f41c1990400c15f16c6ad9700"/149], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x27e}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000440)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'veth1_to_bridge\x00', {0x2, 0x4e24, @remote}}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000100)=0x32, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x254) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x3, 0x9, 0x6}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x84) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 66.266180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32 sclass=netlink_audit_socket pig=2493 comm=syz-executor.3 [ 66.760286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12152 sclass=netlink_route_socket pig=2492 comm=syz-executor.4 16:49:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x67}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {0xfffffffffffffffd, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@v1={0x2, "0e1baa39cf0dac2876ac9041a1639967b9b0"}, 0x13, 0x1) sendfile(r1, r2, &(0x7f0000000080)=0xf0, 0x100001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f00000000c0)) 16:49:31 executing program 0: clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") prctl$PR_SET_ENDIAN(0x14, 0x0) 16:49:31 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) mkdirat(r1, &(0x7f00000004c0)='./bus\x00', 0x6) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='\xe4xz\x1c\x0fE\xab\xc9\xa5\x00', 0xcca92bdbf5b60c91, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x2, 0x0, 0x0, 0x1d, 0x6, 0x64}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_netfilter(r6, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80001cc0}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5297c4bdd6c1d9cc}, 0x4000080) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="5401000010001307000000000000000000000000000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ff00000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c0017000000000000000000000000000000000000000000ff000000480001006d643500"/268], 0x154}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xffffffffffffffa1, &(0x7f0000000700)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r8, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000065d900000008000200e55d0000080002009104000008000200a800000008000100f7ffffff080002009801040008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef38571ca0ae3cdd41cfc3e69463f8d2d8d72a6ac53cc9e6f7c7669c858b10956f4feab4e7e38ed61b9b52367e62e93a24412d644a8a3e72095ad4bca66e7e6620254"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000480)) r9 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r9, &(0x7f00000a8000)=[{&(0x7f00000000c0)="580000001200192300bb4b80040d8c56286932324ba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000300)) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0x8328) r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x6100) write$FUSE_INIT(r7, &(0x7f00000003c0)={0x50, 0x0, 0x20000, {0x7, 0x1f, 0xfffffffc, 0x220}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r11, &(0x7f0000000200)='threaded\x00', 0x175d900f) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r12, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r12, &(0x7f0000007fc0), 0x5654807, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r13, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r13, &(0x7f0000007fc0), 0x5654807, 0x0) r14 = dup3(r12, r13, 0x100000) ioctl$TIOCGSID(r14, 0x5429, &(0x7f0000000500)) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x244) 16:49:31 executing program 1: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)) openat$full(0xffffffffffffff9c, 0x0, 0x131802, 0x0) clone(0x21020017fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000002c0)="390000001300", 0x6}], 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 16:49:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x11) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0)}, 0x20) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80100) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0x0, 0x2, {0x7}}, 0x18) 16:49:31 executing program 5: socket(0x0, 0xb44139ede2052a7e, 0x0) socket(0x4, 0x80000, 0x6) socket(0x0, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RLOCK(r2, &(0x7f0000000140)={0x8}, 0x8) creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x108200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@delsa={0x30, 0x11, 0x1, 0x0, 0x0, {@in=@multicast2, 0x0, 0xa}, [@proto={0x8, 0x19, 0x2b}]}, 0x1c}, 0x8}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x3c}, 0x8}, 0x0) fsetxattr$security_smack_transmute(r4, &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000380)='security.SMACK64EXEC\x00', &(0x7f0000000540)='TRUE', 0x4, 0x2) pipe(&(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000440)={0x7ecb931}, 0x8) getegid() openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/context\x00', 0x2, 0x0) getegid() 16:49:31 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r4}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r4}, 0x14) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, r4}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x80006, 0x804, 0x1, 0x10, 0xffffffffffffffff, 0x100, [], r4, r7}, 0x3c) vmsplice(r8, &(0x7f00000001c0), 0x3ca, 0xe) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x0, 0x4000000000000800, 0x3, 0x8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) fchdir(r9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r11 = creat(&(0x7f00000007c0)='./bus\x00', 0xb9) fcntl$setstatus(r11, 0x4, 0x6100) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r12, &(0x7f00000000c0)='./file0\x00') mkdirat(r12, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r13 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r13, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000f501e2a7334f450b53a86b544fc9aa77dbab2c18af528bece978ebad1256ea000000808b76cc0aaf77a8e29f6bec87cad295bd816add1beb86d6deb4ad1a016029f75d028f15a39bc2dab32e517a54d7b426ad0f8d5e8e1b104e270fffc1f92a51df347765d916c6db", @ANYRES16=r14, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000065d900000008000200e55d0000080002009104000008000200a800000008000100f7ffffff080002009801040008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef38571ca0ae3cdd41cfc3e69463f8d2d8d72a6ac53cc9e6f7c7669c858b10956f4feab4e7e38ed61b9b52367e62e93a24412d644a8a3e72095ad4bca66e7e6620254"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sendmsg$TIPC_NL_BEARER_SET(r12, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000e00)=ANY=[@ANYBLOB="e8010000db07c903c6a698cc5e88257edbdb1a8a0e7d0dfbac193fa37b345bd45e1e8ffbab9a30cd1ed293f1b36f9feda3bc09b385bfebfc334d7f6e9d3eef9118b164d30a33167350ce547cbfc2944e7338259a0785737f1ed2c336536c0452a737d1b0adc20c303dda4e40d75eabb8e44390002a22afd16d40f0df4219a60914d62d2efca7afe06ed8f3cfe753dd255b0c316c38d6663a0e0e6905d1d0b357068ab77595bd7d0b16f386e52b4c3e384855a409aa373239a3457766a4a796026711cf631942b760d43f9fb8b473c2303c4bfed7133eab783142bbe411a9a5242940af421d27f2af11be689446", @ANYRES16=r14, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0xe}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r11, &(0x7f0000000200)='threaded\x00', 0x175d9189) socket(0x4, 0x2, 0x1e) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r15, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r15, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x7, 0x5, 0x80000000}, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x24}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r16, 0x4) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r16, 0x4) fcntl$F_GET_RW_HINT(r17, 0x40b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) write$input_event(r1, &(0x7f00000001c0)={{0x77359400}, 0x5, 0xfff8, 0x8}, 0x18) readahead(0xffffffffffffffff, 0x6, 0x100000000) pwrite64(r11, &(0x7f0000000500)="8f2d0b68f901b970c304881a7c0f467deff28699261da94e9957dad1060779f40d1e3467fd794bd2c5cf3ecc8e4420c793a17a7765aa22b3095e1c46fd66e58902d4df88541abfb4e779ca0dbbe2fc73a7534fae7b5bb18856c761e6778b30f7cfdb4029adf3aefb013bfde2a6e3790147250f9a388b1a3104152bcaa5b78257bd6c31793a51178b8ee4e87cc3d6c0c450b8c5bbe8ca12fb4fa7a6029f95bdd9fe26ceea89b8fc2d6a849ff182267e4d4d510aebeacd16c5435783cccb6d288342325685bc2ee2d44c6e16c946", 0xcd, 0x0) [ 67.572796] keychord: Insufficient bytes present for keycount 0 [ 67.581840] keychord: Insufficient bytes present for keycount 0 16:49:31 executing program 3: socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) wait4(0x0, &(0x7f00000000c0), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000f40ff8)}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000040400000000000000000000000000000000000000000000000000000000000000060055942398f1e0218ba07a"], 0x4}, 0x8}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002400)={@local}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) write$selinux_user(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a0000008068646f675f6465766963655f743a73302072a16f7400"], 0x2c) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {0x0, 0x40}}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 16:49:31 executing program 4: socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) wait4(0x0, &(0x7f00000000c0), 0x6000000a, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6}]}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x2a) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'ip6gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002a80)={'rose0\x00'}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x761, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) dup3(r3, r4, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) [ 67.677246] input: syz1 as /devices/virtual/input/input4 16:49:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000000140)='f', 0xed6ced1c7ba8118c, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r4, &(0x7f0000000180)="19757654b5670271d90a1d6bf240be71cdf14b0bffe14fe5886ac145d2278456a394f93920a18927cf4fcac0a236e8f3e455b8dd08888249af461f20aebd12e3ed6631e277924b2c6d844f557e72a843849af0bad09481e9e807d46affe0a1e5f8ee74693a82ab26ac92c2c389c344996662ea557963b19ce2", 0x79, 0x40, 0x0, 0x0) 16:49:31 executing program 2: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0xffd9) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/248, 0xf8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cg\x9c\xaa\x16\xc0\xc46syz1Xr\xc8,~\xbc\xf3\xc0\x15X\xd1\xc6\xfd\xbc\xd0J\x8d\x98AfSCTk\xb4Vla\x8a\xac\xb9\x7f|R\x04\x8b\x9c\xf3\x14K\xbc\xbe\xe6\xcfH5\xbb&\xa3\v,\v6\xfb\x80\x03\v\x9f\xcc#d\xcaZK3Z\xc6\'\xa5\xf6\x1f\xa5\xdf\x18gJ\x03\x83\xf4\xb7\xa6\x9bS\x89\xedg[\xa0\xa6\xec\xf4\xfb\x03\xe75\x9b9\xdd\x88\x04\xa7\xdb\xf4\x15Es9\x14\xb1\xcc\xd7\xbf\xado\xbe\xfa\x17\xd7\x16\xab,g\xcaNM9\xa3\xde~\xb4>\x8c\x91rP\n\xbeE\x90w_\xec\xade\x8fp\x91{F\x13=\xb9TS\xdb\xf0\x8d\x92\xdb\xcc\x1f\xcc?\x00\x8f\xef\xf0\xbd\xda', 0x200002, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) open(0x0, 0xb99d5be4bd5b6be6, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd6a) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='#\xfe\x19\x8d\xe5\xfe\x9a\xc0\x00', 0xfe781882c981b9e8, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) [ 67.843375] input: syz1 as /devices/virtual/input/input5 [ 67.872800] input: syz1 as /devices/virtual/input/input6 16:49:31 executing program 3: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0xff, 0x9, 0xfffd}, 'syz1\x00', 0x10}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f0000000080)={{0x0, 0x2710}, 0x2, 0x8, 0x1}, 0x18) r2 = dup(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x20, 0xba4, 0x5, 0x200}, 'syz1\x00', 0x4d}) read$FUSE(r2, &(0x7f0000001180), 0x1000) [ 67.996066] input: syz1 as /devices/virtual/input/input7 16:49:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1219ae739c3c8590) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600)=0x207, 0x2) r1 = socket$inet6(0xa, 0x4, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) pipe(&(0x7f0000000400)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000180)=0x10001) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) mlockall(0x14) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r3, &(0x7f0000000540)={0x18, 0xfffffffffffffffe, 0x1, {0x3298}}, 0x18) r7 = socket(0x10, 0x80002, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) connect$netlink(r7, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(&(0x7f0000000440)) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000580)={'bcsh0\x00'}) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) sendfile(r3, r6, &(0x7f0000000140), 0x8fff) [ 68.087596] input: syz1 as /devices/virtual/input/input8 [ 68.132399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2602 comm=syz-executor.2 16:49:32 executing program 4: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$describe(0x6, r0, &(0x7f0000001f80)=""/4096, 0x1000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000300), &(0x7f0000000440)=0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000003c0)={'team0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'bpq0\x00\x00\xeb\x00\x00\x00\x00\x00\xff\xff\xff\xe2', 0x200}) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000380)=""/134) socket(0x0, 0x803, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x783) sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5", 0x12}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a34689f07e340cec408be4e862cc21d93ea75e6e79c33cb2966b5a3e0a60677b6dbbb84bd6946d81", 0x37}, {0x0}, {&(0x7f0000000f40)="54a0e828872fe6e9bda086485e7f3bde08422042e5a05f13bea1486085300093f4a5a4abda46a4397be6331a2788d84995d0682db2ecba4cc024be1f493430feba24e7ef0e3987eb5ab799e035467f84ea4affb56e6ec3c3ec6bedb3a146f7d5ac1dd0fbbe738f75eec6fcfb55946d08623418c6a554fa5ae4bab3e352df47136233937c1c3ddd6c5bee1826a294c32a78eca238409a18e551720236a1187feb5975a28f5bbb83c8ad97f63537144bdffef8a43b62aa89d46cfed06318678870256e07a42a6f989ca29cce7992fdbbecb9407eceea5cd8b6daac884fc609af653c90b36f4ff03477eaebeeb62ade20c9c0a65cee56e82e9168cbebc2fbddf931caaa483bc10127aa87b13e88929aaba33011d800a0771d8d90cd838a4f34cd7faa044f9713f5d3e2d7be15ec44f4196799fe8f6705af7e23a81e33f5d3dd1236ecbec240ef8ebfe4df5bd1783f8730828da1357f7e1a66bb475d76bacbeb41818e016de90130f5796cf7ffa4cc28fca35fa3db8a271c150ee10c296bee997fdf46b06372b7f1b2a7d8159baaee675a02e5b4185fb68c337a3ccf92ebb8b836f6a70342c533229f978ba5f3ebb9460df23739be87b9aa01bd1a804f40d744d0cc060b44a520a4a1dd3e95c86150a9fb914d34bc6b61d91f344aacee3c94c1040e867d5cd4d37687bf685a27216307431b31f486b22da39374da24ad1cd61b98855c1eb493245ba97333227c45cb4e5743e119423a42cf73721e1ca0e5cade1f4c0f1c7d098ce5baa5adcd1d73eee5f7498617c5bd00181f3364d7f1a0f54f5633aa8e7ec42244f023b2d5a311933e9a52f68e8c3e46caa6d9611ca5d3216caf842275c9bcaf6503245ccda6d53907ca4ac3af4452896044b41ab55884d5cdbcf048044eb5d1cc5691f5142751f3c7e214afaede155e713e72cb9634e4de1f661527cca426983d788e31d6b0c831383d2140a7b9b134f6e68b0378589532b11bba1008347dfb481ff083177ca4d4454c32011fd1e9fa1bfe8698f1791a4097bc5ec4e0b1d8a93f457a2263d391d158eb7dfa29b59c6fec5cd9316a91c839e2f39d91d384e16eb06c400bd05ae53022fa967e0059163eae2f1572", 0x319}], 0x3}}], 0x2, 0x4081) sendto$inet(r1, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) socket$netlink(0x10, 0x3, 0x2) 16:49:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x9) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000a40)={0x0, 0x8000, 0x3, {0x7, 0x101}, {0xffff, 0x2}, @rumble={0x2, 0x9}}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000380)=""/13) ioctl$UI_DEV_DESTROY(r0, 0x5502) fgetxattr(r1, &(0x7f00000003c0)=@known='com.apple.system.Security\x00', &(0x7f0000000880)=""/4, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) r6 = dup(r5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @initdev, @remote}, &(0x7f0000000900)=0xc) r8 = getuid() openat$keychord(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/keychord\x00', 0x31c00, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000)=0x0) setreuid(r8, r9) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000940)={{{@in=@multicast1, @in6=@local, 0x4e20, 0x3e, 0x8, 0x0, 0x2, 0x0, 0x40, 0x87, r7, r9}, {0x9, 0xf8b, 0x2, 0xffffffff, 0xeb0, 0x8, 0x9, 0x5}, {0x100000001, 0x8, 0x81, 0x3}, 0xae9, 0x6e6bc0, 0x2, 0x0, 0x1, 0x2}, {{@in6=@ipv4={[], [], @rand_addr=0x1}, 0x4d3, 0x33}, 0x2, @in=@multicast2, 0x0, 0x2, 0x0, 0x9, 0x8000, 0x6, 0x2}}, 0xe8) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='@', 0x1, 0xfffffffffffffffb) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xb) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000140)="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"/297, 0x3accf8d5) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, [], [{0x2, 0x56d47315, 0x400, 0xa396, 0x400, 0x9}, {0xa2d6, 0x800, 0x6, 0x7ff, 0x100000001, 0x400}], [[], []]}) 16:49:32 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="12cb96df", 0x4) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009200000e0000000000000000000000000000000008000000000000000529"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) [ 68.484578] input: syz1 as /devices/virtual/input/input9 [ 68.585041] ------------[ cut here ]------------ [ 68.589911] WARNING: CPU: 0 PID: 2633 at net/core/dev.c:2495 skb_warn_bad_offload+0x2b0/0x390 [ 68.598601] lo: caps=(0x000000a2803b7c69, 0x0000000000000000) len=4086 data_len=3768 gso_size=146 gso_type=4 ip_summed=0 [ 68.609615] Kernel panic - not syncing: panic_on_warn set ... [ 68.609615] [ 68.616977] CPU: 0 PID: 2633 Comm: syz-executor.1 Not tainted 4.9.141+ #1 [ 68.623898] ffff8801c89c7238 ffffffff81b42e79 ffffffff82a38ce0 00000000ffffffff [ 68.631976] ffffffff82c71900 0000000000000000 0000000000000009 ffff8801c89c72f8 [ 68.640036] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 68.648093] Call Trace: [ 68.650677] [] dump_stack+0xc1/0x128 [ 68.656054] [] panic+0x1bf/0x39f [ 68.661064] [] ? add_taint.cold.5+0x16/0x16 [ 68.667031] [] ? __warn.cold.8+0x14/0x2f [ 68.672863] [] ? skb_warn_bad_offload+0x2b0/0x390 [ 68.679346] [] __warn.cold.8+0x2f/0x2f [ 68.684877] [] warn_slowpath_fmt+0xc2/0x100 [ 68.690841] [] ? __warn+0x1b0/0x1b0 [ 68.696215] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 68.703134] [] ? ___ratelimit+0x53/0x401 [ 68.708840] [] skb_warn_bad_offload+0x2b0/0x390 [ 68.715150] [] __skb_gso_segment+0x57e/0x6b0 [ 68.721199] [] validate_xmit_skb+0x490/0xab0 [ 68.727253] [] ? check_preemption_disabled+0x3b/0x200 [ 68.734086] [] ? check_preemption_disabled+0x3b/0x200 [ 68.740919] [] __dev_queue_xmit+0x835/0x1b90 [ 68.746967] [] ? __dev_queue_xmit+0x1d4/0x1b90 [ 68.753226] [] ? netdev_pick_tx+0x300/0x300 [ 68.759192] [] ? skb_copy_datagram_from_iter+0x392/0x5b0 [ 68.766302] [] dev_queue_xmit+0x17/0x20 [ 68.771919] [] packet_sendmsg+0x1edd/0x4520 [ 68.777902] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 68.784392] [] ? tpacket_rcv+0x2590/0x2590 [ 68.790276] [] ? sock_has_perm+0x293/0x3e0 [ 68.796153] [] ? sock_has_perm+0x9f/0x3e0 [ 68.801945] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 68.809473] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 68.815978] [] ? security_socket_sendmsg+0x8f/0xc0 [ 68.822554] [] ? tpacket_rcv+0x2590/0x2590 [ 68.828432] [] sock_sendmsg+0xbb/0x110 [ 68.833963] [] kernel_sendmsg+0x43/0x50 [ 68.839579] [] sock_no_sendpage+0x112/0x150 [ 68.845542] [] ? skb_page_frag_refill+0x3e0/0x3e0 [ 68.852027] [] ? trace_hardirqs_on+0x10/0x10 [ 68.858078] [] kernel_sendpage+0x93/0xf0 [ 68.863780] [] ? skb_page_frag_refill+0x3e0/0x3e0 [ 68.870269] [] sock_sendpage+0x8c/0xc0 [ 68.875890] [] ? mutex_lock_nested+0x6b7/0x900 [ 68.882115] [] ? kernel_sendpage+0xf0/0xf0 [ 68.887997] [] pipe_to_sendpage+0x266/0x330 [ 68.896657] [] ? generic_pipe_buf_nosteal+0x10/0x10 [ 68.903320] [] ? splice_from_pipe_next.part.2+0x226/0x2e0 [ 68.910510] [] __splice_from_pipe+0x316/0x710 [ 68.916656] [] ? generic_pipe_buf_nosteal+0x10/0x10 [ 68.925490] [] splice_from_pipe+0xf9/0x170 [ 68.931457] [] ? generic_pipe_buf_nosteal+0x10/0x10 [ 68.938124] [] ? splice_shrink_spd+0xb0/0xb0 [ 68.944176] [] ? security_file_permission+0x8f/0x1e0 [ 68.950928] [] generic_splice_sendpage+0x3c/0x50 [ 68.957328] [] ? splice_from_pipe+0x170/0x170 [ 68.963480] [] SyS_splice+0xe4d/0x14d0 [ 68.969033] [] ? __might_fault+0x114/0x1d0 [ 68.974911] [] ? compat_SyS_vmsplice+0x160/0x160 [ 68.981309] [] ? do_syscall_64+0x48/0x550 [ 68.987190] [] ? compat_SyS_vmsplice+0x160/0x160 [ 68.993614] [] do_syscall_64+0x19f/0x550 [ 68.999323] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 69.006763] Kernel Offset: disabled [ 69.010442] Rebooting in 86400 seconds..