ffe00) 10:25:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f00000000c0)) 10:25:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$inet(r1, &(0x7f0000000000)="92e4214d2f5048d012c6ea77465588ec3b812da7f4bb33d6aa", 0x19, 0x8000, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400240, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) 10:25:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x6, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) [ 316.877161] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 [ 316.911418] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 10:25:48 executing program 0: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000140)) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x0, 0x4) [ 316.941167] IPVS: ftp: loaded support on port[0] = 21 [ 316.946545] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 [ 316.967203] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 10:25:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x50}}, 0x0) [ 316.993885] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 [ 317.034236] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 [ 317.049175] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 [ 317.067014] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 [ 317.090687] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 [ 317.102058] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 [ 317.113799] hid-generic 0000:0004:FFFFFFFD.0001: unknown main item tag 0x0 [ 317.132290] hid-generic 0000:0004:FFFFFFFD.0001: hidraw0: HID v0.00 Device [syz0] on sy [ 317.266697] FS-Cache: Duplicate cookie detected [ 317.271641] FS-Cache: O-cookie c=00000000252db43f [p=000000001ee102d9 fl=222 nc=0 na=1] [ 317.279823] FS-Cache: O-cookie d=00000000b71a2c7f n=000000003901af19 [ 317.286323] FS-Cache: O-key=[10] '34323934393638383835' [ 317.291813] FS-Cache: N-cookie c=00000000af0a3508 [p=000000001ee102d9 fl=2 nc=0 na=1] [ 317.299817] FS-Cache: N-cookie d=00000000b71a2c7f n=0000000055a16304 [ 317.306311] FS-Cache: N-key=[10] '34323934393638383835' 10:25:49 executing program 3: r0 = open(0x0, 0x80, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xbab230cf) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syncfs(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000001000), 0x0, 0x0) fcntl$dupfd(r5, 0x406, r0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='net/unix\x00') read$eventfd(r6, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r7, 0x8, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) ioctl(r8, 0x8, 0x0) ioctl$sock_FIOGETOWN(r9, 0x8903, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r10, 0x408) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r11, 0x408) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x318) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2404000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX=r7, @ANYRESHEX=r11, @ANYRES64=r10], 0x5}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002004}, 0x0) r13 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r13, 0xc0506617, &(0x7f0000000800)=ANY=[@ANYBLOB="04000000000000e2fe19a88fb726b53d9c6ae4483d0c869bc69d280e5a2dc6ff7f00007ec48226773a000000000000000000000000000000000000000000000000000000000000000000000000000000eb60eeb311920c715b73835f667957ee75e7c2414bd64953cf9ceab20b8100008a3519d6790b519c624dc364001e51371c5eafbdeb0de6a56e11369b831b7d5670d3d9dfe0693e0c9a56fe9934912710d66105c7f930d400f1197b3268af98a8ffc955640f79"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000140)=0x4) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 10:25:49 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xffffff7f) 10:25:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x201e}) close(r0) [ 317.354962] IPVS: ftp: loaded support on port[0] = 21 10:25:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) 10:25:49 executing program 5: clone(0x100020040004103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xffffd, 0x0) clone(0x200000200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000003, 0x2, 0x0, &(0x7f0000000080), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2000000000000157, 0x0) fchdir(r0) creat(&(0x7f0000000100)='./file0\x00', 0x80) unlinkat(r2, &(0x7f0000000140)='./bus\x00', 0x200) r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000280)={0x1, 0x8, 0x7}) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/context\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000300)={0x7f, 0x6, 0x5a, 0x1000, 0x7ff, 0x508}) getpgid(0x0) write(r2, &(0x7f0000000400)="3a6ca5f1613ccfec9ba86064afe382ced7a21871f4b3aa5149089a98019555e282cb5307518af059caa94a00577e657268eb050c67c7a79f35bdf6370a384c65c6ffa2589df308f2833d1e5bbdd9920b240514", 0x53) socket$inet(0x2, 0x800, 0x7fffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') ioctl$KDSKBLED(r1, 0x4b65, 0x2d63) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) write$P9_RFLUSH(r3, &(0x7f00000001c0)={0x72b}, 0xffffffdf) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0xffffffffffffff5f) [ 317.724319] IPVS: ftp: loaded support on port[0] = 21 10:25:50 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) 10:25:50 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xffffff8c) 10:25:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1f, 0x4) 10:25:50 executing program 0: readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9, 0x31aa}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) pipe(&(0x7f0000000000)) write(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b) io_submit(0x0, 0x1, &(0x7f0000001500)=[0x0]) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x3) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r3, r0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) socket$inet6(0xa, 0x0, 0x0) open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip_vs_stats\x00') pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) r5 = open(0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7}) bind$packet(r5, &(0x7f00000003c0)={0x11, 0x4, r7, 0x1, 0x0, 0x6, @dev={[], 0x27}}, 0x14) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r5, &(0x7f0000000040), 0x8000fffffffe) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r8, 0x0, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'}) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) r9 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6100) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r10, 0x0, 0x0) ioctl$LOOP_CLR_FD(r10, 0x4c01) openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x400000, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='-{vmnet1[cpuset\'wlan0${system$\x00\xca\xa4\xce\xf0\xf2a\xc51\xc0Cl\xfep\x84\xf1\x8a\xf4\x1b\xc3~{2\x01g\x11\x80R\x80\xbb\x03\xac \xda\x817\x88\x01Y^>\x1c\xb8\xc5\xcaw\xc5\xab\xa3x\x90>\x86qW\xa8\xb7\xdb\xa1\xd6xS\xb2:\x87\x12\x03\xafV\x85\xc4\x0e~\x89\x18\x86\xd4\xd2\xc1\x00\xda\x9b.', 0x71, 0x2) 10:25:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(0xffffffffffffffff, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0xffffffffffffff5b) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=0x0}) write(0xffffffffffffffff, 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380), 0xfffffffe) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0xff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = creat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) open(&(0x7f0000000000)='./bus\x00', 0xa24, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 10:25:50 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 10:25:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000), 0xffffffffffffff12) [ 319.013095] audit: type=1400 audit(1573467950.990:76): avc: denied { audit_read } for pid=12565 comm="syz-executor.4" capability=37 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 10:25:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x3}], 0x1) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/57) semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000280)=""/4096) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x10}, 0xffffff9a) lseek(r2, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 10:25:51 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xfffffff6) 10:25:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r0, 0x400000000000007) 10:25:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000fffdffe466000000000000002d010000000000009500000000000000"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) 10:25:51 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a04, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 319.274926] audit: type=1804 audit(1573467951.250:77): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir103971659/syzkaller.k5LB9F/316/bus" dev="sda1" ino=17170 res=1 10:25:51 executing program 2: unshare(0x40600) io_setup(0x401, &(0x7f0000001980)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000001c80)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [ 319.361081] audit: type=1400 audit(1573467951.320:78): avc: denied { prog_load } for pid=12602 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 10:25:51 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x0) 10:25:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000036c0), 0x12) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ftruncate(r2, 0x200006) sendfile(r0, r2, 0x0, 0x8000fffffffe) 10:25:51 executing program 0: fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1ffffffffbffe}) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$unix(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000100"/110], &(0x7f0000000040)=0x6e) r1 = socket(0x18, 0x1, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) close(0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) [ 319.747795] audit: type=1804 audit(1573467951.720:79): pid=12581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir103971659/syzkaller.k5LB9F/316/bus" dev="sda1" ino=17170 res=1 [ 319.823481] audit: type=1800 audit(1573467951.780:80): pid=12617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17159 res=0 10:25:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r3 = open(0x0, 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) ftruncate(r3, 0x2007fff) 10:25:52 executing program 4: connect(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x1950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/8, 0x8, 0x20002082, 0x0, 0x218) 10:25:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000036c0), 0x12) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ftruncate(r2, 0x200006) sendfile(r0, r2, 0x0, 0x8000fffffffe) 10:25:52 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000002c0), 0x4) 10:25:52 executing program 3: semop(0x0, &(0x7f0000000040)=[{}, {}], 0x2) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) 10:25:52 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xfffffffe) 10:25:52 executing program 4: 10:25:52 executing program 2: 10:25:52 executing program 3: 10:25:52 executing program 0: 10:25:52 executing program 4: 10:25:52 executing program 2: 10:25:52 executing program 5: 10:25:52 executing program 0: 10:25:52 executing program 3: 10:25:52 executing program 4: 10:25:52 executing program 5: 10:25:52 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x1000000000000) 10:25:52 executing program 3: 10:25:52 executing program 2: socket$inet6(0xa, 0x1, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000300)='trusted.overlay.nlink\x00', 0x0, 0x245, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 10:25:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000200)) 10:25:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vet\xbdh\x04\xff\x7f\x00', 0x43732e5398416f1a}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x100000000000001) 10:25:52 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) keyctl$session_to_parent(0x12) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000480)={r1, 0x0, 0x1, 0x4e9fbd4, 0x5}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'Fi\x00\x04\x00\x00\x00\x00_?\x00\x03\x00\x00\x00\x00\x00\x00\x00\x1e\x00'}, &(0x7f0000000040)=0x44) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}}, 0x1c) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000000000000000000fa0e00655c86e3da52f5a00604df81388acf7ee396d7b703902762469a3958d45720e5c6a336f07540547526d80c083d0b9fdacec569aadd5e7af73416d2eabe2804d20db8de14"], 0x16) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140), 0x1325e1) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42803) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) syz_genetlink_get_family_id$SEG6(0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$packet_buf(r5, 0x107, 0x5, &(0x7f0000000340)=""/186, &(0x7f0000000100)=0xba) ioctl$TCSETAW(r5, 0x5407, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x8041) openat$null(0xffffffffffffff9c, 0x0, 0x8040, 0x0) r6 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r6, r6, &(0x7f00000001c0), 0xa198) [ 320.634237] FS-Cache: Duplicate cookie detected [ 320.639141] FS-Cache: O-cookie c=000000005aceca00 [p=000000001ee102d9 fl=222 nc=0 na=1] [ 320.647431] FS-Cache: O-cookie d=00000000b71a2c7f n=00000000e1c1f94f [ 320.654096] FS-Cache: O-key=[10] '34323934393639323232' [ 320.659590] FS-Cache: N-cookie c=000000005946f8ce [p=000000001ee102d9 fl=2 nc=0 na=1] [ 320.667557] FS-Cache: N-cookie d=00000000b71a2c7f n=000000000e293ac8 [ 320.674185] FS-Cache: N-key=[10] '34323934393639323232' 10:25:52 executing program 3: 10:25:52 executing program 5: 10:25:52 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfebb) [ 320.834833] print_req_error: I/O error, dev loop0, sector 0 10:25:52 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, '7\x00\xe1\xff\xff\xff\x00'}, 0x10) 10:25:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x280001, 0x0) write$smack_current(r4, &(0x7f0000000040)='keyringcgroup:cpuset\x00', 0x15) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x600080, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x800, 0x0) fcntl$setstatus(r6, 0x4, 0xa400) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) r7 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8000fffffffe) 10:25:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x80000002, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r5, r6, 0x0, 0xfffffffffffffff9) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x180) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) getuid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) lstat(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000000740)) preadv(r8, &(0x7f0000000180), 0x0, 0x2000107c) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 321.025486] SELinux: policydb string 7 does not match my string SE Linux [ 321.079222] SELinux: failed to load policy 10:25:53 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x6b6b6b00000000) 10:25:53 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001400)='./file0/bus\x00', 0x88040, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) statfs(&(0x7f00000012c0)='./file0/bus\x00', &(0x7f0000001300)=""/97) 10:25:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080), 0x4) 10:25:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x80044504, 0x0) 10:25:53 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x8, &(0x7f0000000000)) rt_sigtimedwait(&(0x7f0000000080)={0x3ffff}, &(0x7f00000000c0), 0x0, 0x8) 10:25:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$selinux_context(r1, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r3, &(0x7f0000000200)={0x8be1}, 0x8) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x100) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000600)=0x400) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f00000001c0)) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000300)={0x1, 0x0, 0x3, 0x3, 0xc, 0x80, 0x7f, 0x2, 0x8, 0x7fffffff}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FICLONE(r4, 0x40049409, r3) fcntl$setstatus(r3, 0x4, 0x40400) socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f0000000380)='./bus\x00', 0x101000, 0x90) write$P9_RSTATu(r4, &(0x7f0000000500)=ANY=[], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_smack_transmute(r5, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x3) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000301ffff0000000000fdff0000000000"], 0x14}}, 0x0) 10:25:53 executing program 2: clone(0x1000000000011, &(0x7f0000000180), 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f00000000c0), 0x4, 0x0) 10:25:53 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x14b) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = memfd_create(&(0x7f0000001200)='}\xbf*x\x89-vO\xd3JUk\x88O\xc4N\xa2\rqI\r\xb3\xd9Q(\n\x1a\x9f/X\x1d9\x03\xc2\x16\xaf\x9d\xffl\xdcC\xeb\xa6\x96\x12$\xd15[z\x85\xf4\x1e\xcc\xfc\xf64\x00\x00\x00\x00\x00\x00\x00Pw\x1bN[\x81\x92\x15P\xc5\x0e\x06\x17\b\xaf\nu\xd8D9z\x9eR\bjh\xce\xa9j\xda\xf8B\x84\x8d\x12.\xeb\x95\x9a\n\xb2M\xc7\xd1\x87N\xc5Os?T\"\xfc\fc\x92\xbb>\xa3l\x9a\xc9\'\x14\xd5+\xb1\xa6\xf5\x9e\xd1\xea%\xd8l\xae\xd6\\dZ\x17/\xe7$(\x8ax\xdc\xc4\xb7\xa4\x9b\x92\xd8\x16Lz\x9e\xfc\xf8\xf1\xdc\xb9+F~%\x16e\x81\x1b\x11vw1:\xdd]\xb9\xe8\x99\xea\xd1O\x83\xf3WA\xad\xaa\xdc\r~[I\x9f\xac\x03\xf9\xe2\x12Je\xe9$\xd2\x00\xef\r\x9dQ2\xa1T4\xb4\x116RO+\x0e\x98\x8b\x1b\xc1\x81\xf0U\x93\xd1\xf7\xbb}N\'\xea\x8f\xbbdd\xda\xb5\x7f\xff\xef\xfd\xd5\x9b\x01?\xad \xa8\xe3l\x86\"\x94M\xd5\xfa]\x9f\x1d\xad\xf9y\xfc\x03=$Z\x00Oa#`qHd\xcc\x8f\x80\xa1\xed\x81 \x85\xe7\x1f\x99\xbe\xe8\xe5\xcey\n\xab\x8b\xa0yM\xba\xcf7}\x8eVQ\xe6d.S\x9e\xb1\x98\xd9\xc8;\xcc\xd5\xf2)\xf7Zh)\xffF\xb8\xc7\xd2%\xe9\xc7\x05\xefq\\\x97]\xd7\x1b\xdf\"o\xca\xd4\xe0\xd5\x125\xefz1\xcc\xe1nZ\xbe\x16\xa1\x8f\xc8)9\xb8\xc6\xc2\xdd8.*U\xe0\xc5\x04\x00\xd9\xfd{ZT\xf2\xe4\xb9\x95x\xa5\xa8\x04\x0f\x8eky\xd8\x8e\xd77\xd7\x0fp\n\x11\x13)\x9b\xf3D\xb2\x88*(\x02{\xb2`:\x01\x00\x00\x00\x00\x00\x00\xee\xff\xff\xffV2\xaa\x82', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendfile(r2, r3, 0x0, 0x497a) pwritev(r3, &(0x7f0000000480), 0x20000000000000e8, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') lseek(r1, 0x0, 0x2) sendfile(r1, r4, 0x0, 0xfffffffffffffffc) rmdir(&(0x7f0000000140)='./bus\x00') pipe(&(0x7f0000000500)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000003c0)={0x1d, 0x3a, 0xc, 0xd, 0x3, 0x4, 0x2, 0x3, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) signalfd(r6, &(0x7f0000000140)={0x11}, 0x245) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000000c0)) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) sendmmsg(r1, &(0x7f00000092c0), 0x0, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x880, 0x0) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) 10:25:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80041272, &(0x7f0000000080)) 10:25:53 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xf0ffffffffffff) [ 321.903812] audit: type=1400 audit(1573467953.880:81): avc: denied { map } for pid=12752 comm="syz-executor.5" path="/selinux/mls" dev="selinuxfs" ino=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 10:25:53 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') pwritev(r0, &(0x7f0000001400), 0x31f, 0x0) 10:25:53 executing program 2: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) syz_open_dev$mice(0x0, 0x0, 0x2000) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)='y\x00', 0x2, 0x1) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000000)=0xe8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000400)={0xfffffffc, 0x0, 0x0, 0x2000, 0x0, 0x3, 0x0, 0x0, 0x700, 0x40, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8, 0x20}) close(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000700)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000000740)={0x2, r3}) accept4$unix(r0, 0x0, 0x0, 0x80800) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getrusage(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xfe) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000004c0)) fstat(0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="17894531411fad29b648587e77351c10ac1134cd25802b8bdecb7f26"], 0x8) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000003c0)=0x1) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) sendmmsg(r4, &(0x7f00000092c0), 0x170, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r5, r5, &(0x7f00000001c0), 0xa198) 10:25:53 executing program 4: perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 10:25:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="390000001300090468fe0700000000fb0700ff3f02000000000000000000001419001a0004000200073f0000000000000000005d1407001ee4", 0x39}], 0x1) 10:25:54 executing program 3: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x184, 0x1) memfd_create(0x0, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000780)=0xe8) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000480)={'L-', 0x2800000000}, 0x21, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r3, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)) close(r3) fcntl$getownex(r3, 0x10, &(0x7f0000000700)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000000740)={0x2, r4}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getrusage(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xfe) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) fstat(0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) add_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000600)="38617344ddf88ef2a971b1c46edd15c3b18211ed90a5ea7e4b8bcbfc564eb493e83d797d2ffd9623461875328e4b1c9cb516f352221a0363ba4afbdf796052cfed2697f0f708b5551cd5e2d0e064f33b49f4d9bb45687275640f9ccad305a67b93aa250c2dffdac4d44760c9de4640b9dca3b829ab6d74f48ddf0f0ac0773d8d41ab121e2260eba29d65b51641121b3a881ca47431e5e1953f119cbcad0b4dacd669", 0xa2, 0xfffffffffffffffa) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x8) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000003c0)=0x1) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) sendmmsg(r5, &(0x7f00000092c0), 0x170, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r6, r6, &(0x7f00000001c0), 0xa198) 10:25:54 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xfeffff00000000) 10:25:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) getrandom(&(0x7f0000004100)=""/4096, 0x1000, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(r5, &(0x7f00000004c0)={0x18, 0x7, 0x2, {{0xb, 'cpusetwlan0'}, 0x5}}, 0x18) sendfile(r5, r5, 0x0, 0xffffffff80000001) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e4a75", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af05742"}}, &(0x7f00000003c0)=0x0) timer_gettime(r7, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r2, r6, 0x0, 0xa5cc554) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x5, &(0x7f0000001980)=""/207, 0xcf}, 0x7}, {{&(0x7f0000000880)=@l2, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001a80)=""/227, 0xe3}, {&(0x7f0000001b80)=""/169, 0xa9}, {&(0x7f0000001c40)=""/173, 0xad}, {&(0x7f0000000900)=""/12, 0xc}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/44, 0x2c}, {&(0x7f0000001e00)=""/142, 0x8e}, {&(0x7f0000001ec0)=""/101, 0x65}], 0x8, &(0x7f0000001f80)=""/130, 0x82}, 0x7fffffff}, {{&(0x7f0000002040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000020c0)=""/122, 0x7a}, {&(0x7f0000002140)=""/46, 0x2e}, {&(0x7f0000002180)=""/82, 0x52}, {&(0x7f0000002200)=""/179, 0xb3}, {&(0x7f00000022c0)=""/72, 0x48}, {&(0x7f0000002340)=""/45, 0x2d}, {&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/27, 0x1b}], 0x8, &(0x7f0000002500)=""/85, 0x55}}, {{&(0x7f0000002580)=@xdp, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/153, 0x99}, {&(0x7f00000026c0)=""/208, 0xd0}], 0x2}, 0x400}, {{&(0x7f0000002800)=@hci, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002880)=""/140, 0x8c}, {&(0x7f0000002940)=""/10, 0xa}, {&(0x7f0000002980)=""/165, 0xa5}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)=""/124, 0x7c}, {&(0x7f0000002b00)=""/84, 0x54}, {&(0x7f0000002b80)=""/117, 0x75}], 0x7, &(0x7f0000002c40)=""/26, 0x1a}, 0xb}, {{&(0x7f0000002c80)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/84, 0x54}, {&(0x7f0000003d80)=""/127, 0x7f}, {&(0x7f0000003e00)=""/232, 0xe8}], 0x4, &(0x7f0000003f40)=""/212, 0xd4}, 0x4}], 0x6, 0x2000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) gettid() ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000940)) 10:25:54 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45fe2cd1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 10:25:54 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x100000000000000) 10:25:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_regs}) 10:25:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="8d", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, 0x0, &(0x7f000021affc)) 10:25:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x2}) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x9d5, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xffffff4d}]) 10:25:54 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') read(r1, &(0x7f0000000100)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f00000000c0), 0x7) 10:25:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) personality(0x410000e) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 10:25:55 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x200000000000000) 10:25:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000003c0)={'eql\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tp, 0x80, 0x0}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) writev(r0, &(0x7f0000000240), 0x19f) 10:25:55 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xee667f47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, r4, 0x0, 0xdd) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'}) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x1811, &(0x7f0000000200)={0x11, 0x297f296326a586c4}, 0x14) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0)=ANY=[], 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 10:25:55 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x10c) 10:25:55 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) ustat(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x292) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x2a}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x2a, 0x7f, 0x9, 0x400, 0x1, 0x2b00084}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r3 = getpgrp(0x0) ioprio_set$pid(0x1, r3, 0xffff) getpgrp(r3) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x70, 0x0, 0x6, 0x9, 0x3, 0x0, 0x7fffffff, 0x1, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0xc, @perf_config_ext={0x80, 0x9}, 0x1, 0x1, 0x4, 0x7, 0x0, 0x8, 0xfff8}, r3, 0x5, 0xffffffffffffffff, 0x8) sync_file_range(r4, 0x9, 0x1000, 0x4) shutdown(r2, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xf06, 0xfff, 0x0, 0x200, 0x6}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000300), 0xffffff7e) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000001400)={{0xa, 0x4e20, 0x291, @ipv4={[], [], @empty}, 0x9}, {0xa, 0x4e21, 0x8080000, @ipv4={[], [], @rand_addr=0x919b}, 0x10001}, 0x6, [0x8, 0x1, 0x4, 0x6, 0x0, 0x1000]}, 0x5c) [ 323.193227] input: syz1 as /devices/virtual/input/input5 10:25:55 executing program 3: write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="3e000000000000e5"], 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x30) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 10:25:55 executing program 2: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(r0, &(0x7f00000000c0), 0x20000000000003fa) [ 323.284201] input: syz1 as /devices/virtual/input/input6 10:25:55 executing program 5: r0 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 10:25:55 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x300000000000000) 10:25:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2801) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)) 10:25:55 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$P9_RLERROR(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00p7-'], 0x7) sendfile(r1, r2, 0x0, 0x401) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 10:25:55 executing program 3: rt_sigaction(0x13, &(0x7f0000000140)={&(0x7f0000000240)="0fa39600000000260f1c33c4c3f96a5be57383410f3806810800000027fec4e1792b3bc4e3f95c5a0039c4e218f5faf0812d7ae3bfb607070000", {0x1}, 0x40000000, 0x0}, 0x0, 0x0, 0x0) madvise(&(0x7f000048a000/0x4000)=nil, 0x4000, 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x46800) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_create(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5d) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000080)={'nr0\x00'}) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x102, 0x9032, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000080), 0x76f2eeb54dd00748) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x8) recvfrom$unix(r6, 0x0, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000002c0)=ANY=[], 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x8) recvfrom$unix(r7, &(0x7f00000007c0)=""/233, 0x24b, 0x20, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000002c0)=ANY=[], 0x0) linkat(r6, &(0x7f00000000c0)='./bus\x00', r7, &(0x7f00000001c0)='./bus/file0\x00', 0x1000) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000240)=@gcm_128={{}, '\x00', '\x00', "0000fd00"}, 0x28) fchdir(r5) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x1a6) bind$inet(r9, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) listen(r8, 0x0) read(r8, &(0x7f0000000280)=""/176, 0xb0) 10:25:55 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x7fc}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) pipe(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0x0, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) pipe(0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x9, 0x8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@loopback, @in6}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) socket$netlink(0x10, 0x3, 0x2) r6 = socket$inet6(0x10, 0x0, 0x0) sendmsg(r6, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000c00160000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab", 0x53}], 0x1}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:25:55 executing program 3: bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(r1, &(0x7f0000000140)={0x67446698, 0x0, 0x0, 0x0, 0x3, "209f52afe9e4cfd07b5cf8cd9762139bcddff5f587b6fb484996f6422d573e425b4c86052d14f331c3f0a4876f8551712fe7d41993e1fd2543a3b8d52a858e4d627caf3a87a5e1b50d3be5d855cd04a27a34762d68a708d920303218ef1a4922d54c097002137e225e"}, 0x79) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e74703cad1efd94cb111bdd474a999c4e405afae64fc43ffdef72ec08f53bec"], 0x78) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) syz_genetlink_get_family_id$tipc2(0x0) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 10:25:55 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x6) 10:25:55 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x400000000000000) 10:25:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0004030000feff800000003a4288443e7ff09b5ed7750700feff162d0201008cfe6d40fedc00000075c4171f001b4f36366194335b7189fe003b400400007104004c2a7b9db52376591a6a71e8b8e01db2e9b638096e6c582a66a2279a6f3d82dd1f2c27283c2b9fdb90109e6697fa878514e8277f16bedd18001374ea271190fdda477c053c82cf881194fae745c1a838a8edeb69fa40103c110d5535bd2d886c53250d51a6279441c1adcda2b01a51c324b9d87b206bba083a1a0fb8cbfdfb48b6a6c5f10aff010000fbffffff28434eec8eca676162f77ad1478ac098f8a217924e062dbd81c4460ec487f4b0723dd071d60a69e32a19ba723161e536d880b600e7a976b5a8d2c17c1e0764e201a5546a96570000000000000001526f9e911393494a1d33f1e6ce190f389d990b6f1cecf6e3801af8fe78b45cf33a64bb47b8b9bae67ce7fdf5ddf8f1bdb9f8b558b04a03000000000000006925c21aa3fcb30f5074c6392a04000000000000006db3e358503e4a1861f7ff13"], 0x17b) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/231, 0x100000330) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) [ 324.092966] audit: type=1400 audit(1573467956.070:82): avc: denied { map } for pid=12912 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:25:56 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x500000000000000) 10:25:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001a80)=0x10) splice(r1, &(0x7f0000000400), r4, &(0x7f0000000440)=0xfffffffffffffffc, 0x48, 0x4000000008) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r5 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'irlan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r6) r7 = creat(&(0x7f00000002c0)='./file1\x00', 0x40) write$P9_RREAD(r5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) lgetxattr(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000300)=""/119, 0x77) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000700)) fsync(r4) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000380)=0x1, 0x4) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) getpgid(0xffffffffffffffff) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x1a1042, 0x0) ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f0000000600)) open(&(0x7f0000000540)='./file1\x00', 0x1, 0x11) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000740)) lstat(0x0, &(0x7f0000000640)) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4000000000001b9, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) [ 324.176435] audit: type=1400 audit(1573467956.100:83): avc: denied { associate } for pid=12913 comm="syz-executor.1" name="ile0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 10:25:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) [ 324.239018] audit: type=1400 audit(1573467956.150:84): avc: denied { map } for pid=12917 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 10:25:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getgroups(0x0, &(0x7f00000001c0)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) clock_gettime(0x0, &(0x7f0000000640)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x40000000000025d, 0x0) [ 324.421913] audit: type=1400 audit(1573467956.400:85): avc: denied { create } for pid=12920 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 324.467917] audit: type=1400 audit(1573467956.400:86): avc: denied { write } for pid=12920 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 10:25:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000001c0), 0x4) 10:25:56 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x600000000000000) [ 324.649147] net_ratelimit: 8 callbacks suppressed [ 324.649156] protocol 88fb is buggy, dev hsr_slave_0 [ 324.659333] protocol 88fb is buggy, dev hsr_slave_1 10:25:56 executing program 3: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x2000001, 0x40000002871, 0xffffffffffffffff, 0x0) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 10:25:56 executing program 2: r0 = eventfd(0x943) write$eventfd(r0, &(0x7f0000000380)=0xfffffffffffffffe, 0x8) read$eventfd(r0, &(0x7f0000000180), 0x8) [ 324.729125] protocol 88fb is buggy, dev hsr_slave_0 [ 324.734249] protocol 88fb is buggy, dev hsr_slave_1 10:25:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd) 10:25:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = creat(&(0x7f0000000740)='./bus\x00', 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @empty}, &(0x7f0000000300)=0xffffffffffffff2b) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000640)={@dev, 0x0, r5}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x420001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x840) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/user\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) fsetxattr$security_smack_entry(r6, &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f00000002c0)='em1.\x00', 0x5, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x208, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000003c0)={0x101, 0x1000, 0xff, 0x401}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r7 = socket(0x2, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009ff4)) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000007ffc), 0x2f5) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000000540)={'NETMAP\x00'}, &(0x7f0000000500)=0xf3d653d) close(r1) set_tid_address(&(0x7f00000000c0)) 10:25:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0xfc, 0xfffffffffffffd4d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) 10:25:56 executing program 2: r0 = eventfd(0x943) write$eventfd(r0, &(0x7f0000000380)=0xfffffffffffffffe, 0x8) read$eventfd(r0, &(0x7f0000000180), 0x8) 10:25:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @loopback}, 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r4) write$P9_RSTATu(r4, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80}}}}) r5 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r7 = dup2(r6, r6) setsockopt$inet_int(r7, 0x0, 0x32, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/357], &(0x7f0000000040)=0x1) ioctl$int_in(r3, 0x0, &(0x7f00000001c0)) write$binfmt_script(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 10:25:57 executing program 3: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f00000000c0)='./file0\x00') [ 325.085534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:25:57 executing program 2: capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000240)) [ 325.165484] audit: type=1400 audit(1573467957.140:87): avc: denied { create } for pid=12973 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 325.224819] audit: type=1400 audit(1573467957.170:88): avc: denied { write } for pid=12973 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 325.250069] audit: type=1400 audit(1573467957.180:89): avc: denied { read } for pid=12973 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 325.298112] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 10:25:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000040)) 10:25:57 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x700000000000000) 10:25:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e}) 10:25:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[]}, 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(r0) creat(0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) unshare(0x200) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') wait4(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f00000005c0)='trusted.overlay.opaque\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000600)="38617344ddf88ef2a971b1c46edd15c3b18211ed90a5ea7e4b8bcbfc564eb493e83d797d2ffd9623461875328e4b1c9cb516f352221a0363ba4afbdf796052cfed2697f0f708b5551cd5e2d0e064f33b49f4d9bb45687275640f9ccac4d44760c9de4640b9dca3b829ab6d74f48ddf0f0ac0773d8d41ab121e2260eba29d65b51641121b3a881ca47431e5e1953f119cbcad00"/157, 0xfffffffffffffed1, r6) request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='&\x00', r6) r7 = add_key$user(0x0, 0x0, 0x0, 0xe1834a367390b774, r6) keyctl$invalidate(0x15, r7) keyctl$assume_authority(0x10, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000380)) socket$inet6(0xa, 0x10000000001, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f00000014c0), &(0x7f0000001500)=0xc) setns(r5, 0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) pipe(0x0) getgid() 10:25:57 executing program 4: r0 = dup(0xffffffffffffff9c) ioctl$BLKBSZGET(r0, 0x80081270, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000240)='/dev/loop-control\x00') unshare(0x40000000) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f00000002c0)=""/59, 0x14, 0x3) lsetxattr$security_evm(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)=@md5={0x1, "a80813c98a5c3d3c19c300c4a110f468"}, 0x11, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0xff66) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) [ 325.469882] audit: type=1400 audit(1573467957.450:90): avc: denied { map } for pid=12999 comm="syz-executor.4" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 10:25:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000600)=""/13, 0xccacf294) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000c00)="b6", 0x1, 0x4008000, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) [ 325.572667] IPVS: ftp: loaded support on port[0] = 21 [ 325.605141] audit: type=1400 audit(1573467957.580:91): avc: denied { getopt } for pid=13002 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 325.658067] IPVS: ftp: loaded support on port[0] = 21 10:25:57 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x3300000000000000) [ 325.765291] IPVS: ftp: loaded support on port[0] = 21 10:25:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) 10:25:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000440)={{}, {}, 0x8, {0x2, 0x0, @multicast2}, 'veth0_to_team\x00'}) 10:25:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 10:25:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 10:25:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(r0) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = socket(0x1, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000040), &(0x7f00000001c0)=0x14) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x5c, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x1) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = dup(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0x14, 0x100000000401, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, [@typed={0x8, 0x2, @binary="b8e02709"}]}]}, 0x20}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = gettid() sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000140001240000000040b2ad000d0008000800a58f378bdcee759859310baed50fda6b746d60bd231c42e62710", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x189) r10 = getegid() openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000ec1000)=0x5, 0x4) setregid(r9, r10) 10:25:58 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) dup2(r1, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r2, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001540)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x2, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r6 = creat(&(0x7f0000000840)='./file1\x00', 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) rt_sigaction(0x2e, &(0x7f0000000380)={0x0, {0x12a2}, 0x0, &(0x7f0000000200)="c4e1fbf054b374c4c195f480e9000000c4c261de190fa1c4c279787f00c4c37916877ac6000037260f1d2c712664dce126660f3a4449060a2913"}, &(0x7f0000000700)={&(0x7f0000000640)="c4e17d2884c41cf16edec4c12014cac4e1dded27c4c18df17c9919c4c291df68f4c4e3750fc20126d8f4660f2b98f6ffffff0f01d60f186620", {}, 0x0, 0x0}, 0x8, &(0x7f00000007c0)) getegid() syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000040)=0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r10, &(0x7f0000000200)=""/250, 0x50c7e5e2) fcntl$F_GET_RW_HINT(r10, 0x40b, &(0x7f00000001c0)) ioctl$EVIOCGABS2F(r10, 0x8018456f, &(0x7f0000000480)=""/224) 10:25:58 executing program 0: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000a00)="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", 0xffffff5d) io_cancel(r2, 0x0, &(0x7f0000000340)) write(r1, &(0x7f00000001c0), 0xfffffef3) write$evdev(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000840), 0x1000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10001000a00) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) getpid() r7 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x7, 0x0) signalfd(r7, &(0x7f0000000500)={0x49a}, 0x50e) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000140)=0x20000) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) lseek(r6, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10:25:58 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x3f00000000000000) 10:25:58 executing program 3: ppoll(0x0, 0x0, 0x0, 0x0, 0xa1) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000a40)=""/250, 0xffffff72) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:25:58 executing program 5: pipe(0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000340)=0x2, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r0, r2, 0x0, 0x20020102000007) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) getsockopt$sock_cred(r5, 0x1, 0x19, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) syz_open_procfs(0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x1) ptrace(0x11, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$int_in(r1, 0x5452, &(0x7f0000000480)=0x845) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 10:25:58 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x4000000000000000) 10:25:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setreuid(0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6}, 0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = openat$cgroup_subtree(r2, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x240080c1) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) statfs(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=""/20) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000080)=0x4) ioctl$TCGETS(r1, 0x5401, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='iPVS\x00') getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000044c0)={'ip6gre0\x00'}) 10:25:58 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x6b00000000000000) 10:25:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x400, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) socket(0x11, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) 10:25:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x4000000000, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[]}}, 0x0) fchdir(r3) r6 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000120007031dfffd946f610500070000001f00000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r8 = creat(&(0x7f0000000740)='./bus\x00', 0x10) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@local, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8) iopl(0x6) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @empty}, &(0x7f00000005c0)=0xc) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r10 = getegid() ioctl$TUNSETGROUP(r6, 0x400454ce, r10) fsync(r8) write$P9_RSTATu(r8, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r9], 0x17) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x58, 0x2, 0xfffffffffffffc00, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x0, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x1, &(0x7f0000000480)=[0x6]}}, {0x53, 0x100000001, 0x6, {0x8}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x0, 0x0, 0x0, 0x8}}}}) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x4000002000000d}, 0x50) socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0xe, &(0x7f00000006c0)) ioctl$int_in(r5, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x1) 10:25:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 10:25:59 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00005d5ff2), 0x2e, 0x0) [ 327.611662] device syz_tun entered promiscuous mode 10:25:59 executing program 5: clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) [ 327.649517] device syz_tun left promiscuous mode [ 327.700194] device syz_tun entered promiscuous mode 10:25:59 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x8004000000000000) [ 327.722221] device syz_tun left promiscuous mode 10:25:59 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x1}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 10:25:59 executing program 5: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x0) dup2(r0, r1) sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 10:25:59 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x40000000000000) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) pipe(&(0x7f0000000400)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x92c}, 0x1c) read(r2, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r4, 0x200005) sendfile(r3, r4, 0x0, 0x8000ffffffff) accept4$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 10:25:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_procfs(0x0, 0x0) readv(r3, &(0x7f00000000c0), 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x2a, 0x7f, 0x9, 0x400, 0x1, 0x2b00084}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x4) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) fcntl$setstatus(r6, 0x4, 0x8d264d94b88cc547) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, 0x0, 0x40051) 10:26:00 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f00003efff0)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x0) read(r2, &(0x7f0000000000)=""/128, 0xf0) signalfd4(r2, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) 10:26:00 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x8cffffff00000000) 10:26:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x30, &(0x7f0000678f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x33f7) [ 328.758487] FS-Cache: Duplicate cookie detected [ 328.763318] FS-Cache: O-cookie c=00000000e89c6ea9 [p=000000001ee102d9 fl=222 nc=0 na=1] [ 328.771612] FS-Cache: O-cookie d=00000000b71a2c7f n=000000003694bcee [ 328.778102] FS-Cache: O-key=[10] '34323934393730303334' [ 328.783614] FS-Cache: N-cookie c=00000000f708da73 [p=000000001ee102d9 fl=2 nc=0 na=1] [ 328.791803] FS-Cache: N-cookie d=00000000b71a2c7f n=00000000f63ca3ec [ 328.798303] FS-Cache: N-key=[10] '34323934393730303334' 10:26:01 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xea\xff\x00@', &(0x7f0000000280)=@ethtool_ringparam={0x44}}) 10:26:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x1b2b8000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000440)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1c3842, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = dup(r8) sendmmsg$inet6(r9, &(0x7f0000008040)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000007f80)=[{&(0x7f0000004bc0)="411009edc4898299be7bfdf4827696e9d06334ddde71c2816ab401180bdfc34593736ab7f91748f23f", 0x29}, {&(0x7f0000005d40)="7830f8d74715b63dc4234fc35da69f43c30cd3a702197241c21c09b2e82a01b2ea51f79afbac36d472d94e387f0b711e382cde7e0633a65293e6307b1bd7fc1caa194f360772ebb0eea515ab2a397f9f7949826af16b4c77239497bc8f046e859c1604830251612ede444fbdc497c16a52deb6c2ac146e665dcb932cc6abb9427b20d69a3469b38956b00e2d9dc1e36999082ed539a3ae8f496e66915dca6a3bf02b0e37be0c654eefc773eaee30e00b385cdfe315733206de1b134a350979056437a6b7accd613c90b3d1643b798bafedd0de298f6b665d3dccf6569d493b6d18b2c6bb4dadb1aa085b0160ded595a900a7fe27bba71dd0f8ea9f74164cb9452873a55700ca17fe8a4b4274fa0867a78b0149e835ea013880f393339981f7f6b4ccc856731d6f8358b40dd84d5e3353f567e77b8fb35bd6c558ca282be2a483948fc4a24d238304f8fbaa25431c215fd0ae643f6a671005870959b2062ee5d29dced7db41fb31daac8741da836544f85d8f4046930c3e25b761dd0d38c28b43e0e8c78626e0f14cd81f4dfde1c8c3c4223e666a0e9f21ada09ea24d75d67e75ad9ef06b522f5f256110d2590f0b698f43c32082158c9bfec394821b7d6025af8e5fbee76e40b0aa7d33eacd08be517b720e65a8fe2f46103f1a93c224d9407dd2074408512f8a914b971b545b3bec89dcf9e3e6ab0f77336fbb3a0d958a2d4faedadd24ae4e4c97d650801b7150b0debd9cbe8fbe54342db0e3bc5c1b517f6ecaf38ed7aacb4f70c6e9b6fb8867c1faf4e4ac51a646425cd99366123c981cf6b9c9b4e73cc6af32db8df0f07096fac5f987b0b0de9da29bf53b48dee52a33998fc985ab5421a4d529d7ccb658a672a8de7076daf5b43df4f7b539290584172e4a54293cf3c9e0b1ff06995c19a9e1c470be66cebacc338533089a68d4dee46ede71756dddf9500f52b64acc86f575f8be2f08e1d79fa683baf9cd615e7d9106a6484723d476ba7a42135147b23fca788d44226bfbdca70d76105fb078c200cc9c48a99a12b2b99dc04d4730830843d98601dd7eacffbfd3ffb228791ec577ddb4eb31a1f3115d66fbe2a6293d759566ab8dbef297e0552ab2e99bb624ea55141564536a5d1f91c4e18148f8d5a6016c3fa91d1d4310298d3cbd3f5344c4d5daadbb9ff9fe57f14ab8dbf344e8d2411c9eb7f16f8f5a96a71d7b02063c29dc23399edfb07bf69b2ce638af42e74dd2be9bd9b2bb95565a25c8bc0a6538509d2775a7c7eaf8653795a8048d868738d80d9532cfb9ef4fa0a609ca2fc53ebd2d75533461b4f23dd12c80de2ddd85f63db51c42b0e0d4eeffd719ac6851fb6cc812c6960b4add097a520afbd351c6a276ee95e68eda2f129b72db2020890a3e83aa6155cb484bed297f2dc30e40793c87220b02b3b73933605a3b629abd07027df078766c2fad0b2521e4d10c38848855baa1d56d462e8f0f21fa7dfe24896325", 0x41f}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000290000002100"/20], 0x14}}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) 10:26:01 executing program 4: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') sendfile(r0, r1, 0x0, 0x4) sendmmsg(r0, &(0x7f0000005780), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$sock_timeval(r2, 0x1, 0x1b, 0x0, 0xffffffffffffffc8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@loopback, 0x42, 0x2, 0xff, 0x1, 0xc77, 0x80000001}, &(0x7f00000004c0)=0x20) listen(r2, 0x80) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x402600, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xfffffffffffffc52) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x200000, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000180)='net/snmp6\x00') write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) pread64(r3, &(0x7f0000000400)=""/84, 0x54, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 10:26:01 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xf6ffffff00000000) 10:26:01 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/40, 0x0) fstat(0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="90e73cedbe844bdda8570833395d493a1aac3238b7a34f24f9cd39785d5c", 0x1e, r6) add_key$keyring(&(0x7f0000000680)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) mount(0x0, 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_gettime(0x0, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000380)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r7, r8+10000000}, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 10:26:01 executing program 2: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') open$dir(0x0, 0x400, 0x20) preadv(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') splice(0xffffffffffffffff, &(0x7f0000000100)=0xff, r0, &(0x7f00000001c0), 0x0, 0x2) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000110}, 0xc, 0x0}, 0x80) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000280)='/dev/binder#\x00', 0x0) [ 329.136693] mmap: syz-executor.5 (13181) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 329.212584] encrypted_key: insufficient parameters specified [ 329.225475] FS-Cache: Duplicate cookie detected [ 329.230396] FS-Cache: O-cookie c=000000000fd584d5 [p=000000001ee102d9 fl=222 nc=0 na=1] [ 329.238571] FS-Cache: O-cookie d=00000000b71a2c7f n=0000000046947cf5 [ 329.245116] FS-Cache: O-key=[10] '34323934393730303831' [ 329.250610] FS-Cache: N-cookie c=00000000da810c5b [p=000000001ee102d9 fl=2 nc=0 na=1] 10:26:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0xc901) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) [ 329.258607] FS-Cache: N-cookie d=00000000b71a2c7f n=0000000010d15e2e [ 329.265141] FS-Cache: N-key=[10] '34323934393730303831' 10:26:01 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f0000000300)='\x00') chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0xc) 10:26:01 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xfeff000000000000) 10:26:01 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) capset(&(0x7f0000000140)={0xf1500}, &(0x7f0000000040)={0x1000, 0x1000000, 0x24, 0x85e, 0x80000001, 0xa}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) creat(&(0x7f0000000180)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r3 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r3, r2, 0x0, 0x2000005) read(0xffffffffffffffff, &(0x7f00000005c0)=""/193, 0xc1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f0000000080)='./bus\x00', 0xa00) r6 = open(0x0, 0x4000, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(0xffffffffffffffff, 0x100000000000000, 0x0) sendfile(r5, r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x10000000000001e, 0x0, &(0x7f00000006c0)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1e) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 10:26:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000002c0)=""/164) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) fchdir(r0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f00000000c0)={0xfffffe1d, 0x21, 0x2}, 0xfe3e) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r3, 0x0, 0xd028, 0x816d1) write$P9_RFLUSH(r3, &(0x7f0000000100)={0x7}, 0x7) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x7}, 0xffffff38) r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0xef08f1c32a389126, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000140)) fsync(r3) socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 10:26:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000140)="11eaa50d0000cee47bf070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000000c0)=0x800000, 0xfffffffffffffd01) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r4) creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.0\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080), 0x1c) r9 = dup2(r8, r8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x132224) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r11, 0x208200) getuid() lstat(&(0x7f0000000bc0)='./file1\x00', &(0x7f0000000c00)) fstat(r10, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000e40)) getgid() getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) getgroups(0x5, &(0x7f00000010c0)=[0xffffffffffffffff, 0xee00, 0xee01, 0x0, 0xee01]) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r7, r12, &(0x7f0000000040), 0x8000fffffffe) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="021201cae80000000000200000"], 0xd}}, 0x0) dup3(r1, r2, 0x0) 10:26:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000240)=""/79, 0x401) lseek(r1, 0xfffffffffffffffe, 0x1) getdents(r1, 0x0, 0x0) 10:26:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x9, 0x3, 0x0, [{}, {[@remote]}]}]}}}], 0x1c}, 0x0) 10:26:02 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xfeffffff00000000) 10:26:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff}) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) memfd_create(0x0, 0x1) memfd_create(0x0, 0x2) getresuid(0x0, &(0x7f0000000180), &(0x7f0000000440)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000000)=0x3a0) connect(r0, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000480)={'L-', 0x2800000000}, 0x21, 0x3) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr="ac021c0158eab1caa6e4f4989e3495ca"}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') sendfile(r3, r4, 0x0, 0x88001) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0x5b0908af46d3301a) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000700)={0x1}, 0x4) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000600)=ANY=[@ANYBLOB="0000040000000006a5763af841c07d429e49e4756552dcd026f1b67a2d4e020006000fafe77f08cd89518e9711f66ecb31b5aed1f03027d7a45d8febde333a72b37f00000000000000"], 0x8) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0x200c2, 0xfffffffffffffffd) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r7, r7, &(0x7f00000001c0), 0xa198) 10:26:02 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x20200, 0x0) [ 330.111485] kauditd_printk_skb: 2 callbacks suppressed [ 330.111501] audit: type=1400 audit(1573467962.090:94): avc: denied { ioctl } for pid=13180 comm="syz-executor.0" path="socket:[54189]" dev="sockfs" ino=54189 ioctlcmd=0x54ca scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 10:26:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e80)=[{{&(0x7f00000026c0)={0xa, 0x4e20, 0x0, @rand_addr="298ae2d5ac031ec23ec9f508258fd5c1"}, 0x1c, 0x0}}], 0x1, 0x0) 10:26:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 10:26:02 executing program 5: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000003c0)=0x1, 0x90) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200a4}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="25c36c2200da0f35a2b66a5686d60000f0722f78f86b0d1295684dfc07db5ec5aa9d7b59c4d1a6700b63d190c665938141bf560ebc39b49d2815aecd3c1e5ee6320fb20d000000822b07340c4411caa73db2adf5573bdaf7819560757a36affeaf632f6452235e919897ebfd1d76632e6a83ca6b51eee005c62eb22222a647a2cfe37963450649ec1c044570ff0ae14cac0c99b78ed4d82d62e5fd3e2b122e0f05a61f330e44caaa216e985565396598ab8150643e72ba1cb68a294864b2cef44b61a535f40577149e557881af4c83c4feb47e98502bd6bea7030829ee42e9c0992df969d2a11f84ad6852db0e2770891328a18ae24b8172a60c1379d4bf68d40463d18dca01d9330e0b0541973278079d0033569e55a10c5054a51506e85c318ff6d5969cc517b88a51ad9dffa1c582b3fb321f718c317829b727e4b7721643cb4bd51367941006d35975613a0873d84a89b8dd371581cf4c802b43868475d5a499", @ANYRES16=r2, @ANYBLOB="25002cbd7000010000000102000100000000db0000000014001462725b6164636176742d6c696e6b080023d900ced5bee93f6a91a90018e94c8376aa094f9b0a14ac332ce8603769fc7eb1c7f51dc7247c462fd3b2fd072e64891cf6411cf7a344225e820cfb0fa7ca85fefe16dc38e9ac5eb7d7193e4e2841a54597309e2468d3d2931fbebdc616d319d54de0ba4b344cd0f3a8207f92a45da5c14c92dfebe20f5acd6563d5d0e57048ed42a131dfb5cffd66c005dc4f9a48495e92debd03feb50093f756d874ecbcc4d10904b6cf14da746400"/223], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x4004090) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000400)='./file2\x00', 0x2) mkdir(&(0x7f0000000680)='./control\x00', 0x0) r5 = open(&(0x7f0000000100)='./control\x00', 0x0, 0x0) mknodat(r5, &(0x7f0000000000)='./control\x00', 0x1008, 0x0) faccessat(r5, &(0x7f000003fff6)='./control\x00', 0x7, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001e40)=0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0x4) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)={0x100000, 0x0, 0x0, 0x0, 0x0, 0x40}) r8 = syz_open_pts(r7, 0x1) dup3(r8, r7, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r9, 0x40045431, &(0x7f00003b9fdc)) r10 = syz_open_pts(r9, 0x1) dup3(r10, r9, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1) fcntl$getownex(r5, 0x10, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(r3) r11 = socket(0x80000000010, 0x80802, 0x0) sched_rr_get_interval(r6, &(0x7f0000000140)) write(r11, &(0x7f0000000800)="2400000058001f02ff03f4f9002304000a1df511080001000201000206000280010000001ef9735fa7109962c2f40b87aa4ca1a20b8cbcb971ff04da4531165788c103ae6082b98fde442a06a3cfca176d771b11b982a2c3c5d02b2b88156b0936a9529a4223e9dae2b996774a80be8499dc68a9e91302759c24c7aff2a5f7c89b19192755417c9b540667cbbdfac037a7eba3fd0683c45a38e0b6a8c62b3f53db323a00"/177, 0xb1) socket$nl_route(0x10, 0x3, 0x0) r12 = openat$cgroup_ro(r0, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$P9_RLINK(r12, &(0x7f0000000500)={0x7, 0x47, 0x1000001}, 0x7) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) futex(&(0x7f0000000580)=0x1, 0x7, 0xfffffffffffffffc, 0x0, &(0x7f0000000540)=0x1, 0x0) 10:26:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'l\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x11}) 10:26:02 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, 0x0) sendfile(r0, r2, 0x0, 0x2008004fffffffe) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x0, r3+10000000}, 0x0, 0x0) 10:26:02 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xffffff7f00000000) 10:26:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x3, 0x0) 10:26:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r5 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @loopback}, 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r6 = getegid() fcntl$getflags(r3, 0x401) ioctl$TUNSETGROUP(r4, 0x400454ce, r6) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r5) write$P9_RSTATu(r5, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x3, &(0x7f0000000480)=[0x0, 0x5, 0x0]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) r7 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r9 = dup2(r8, r8) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f00000001c0)=0x1000000, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007f000000eb17f69fdae82a492d676454fc1dd8b2cf3d576114fa42b0a84bc1bf695b6c03198ae87613f17398099efe9303f42e2120fe8a3d75fb54d4390f38aae7c3a361d118c28cac864f80296c6c2f3f54d190ca4daf15496033f8b4ef42644d97f4d7bc41718cf62ba1aad730a5b708e87a363cbf6063707b75a6127dfa037d8e7e"], &(0x7f0000000040)=0xa3) ioctl$int_in(r3, 0x0, &(0x7f00000001c0)) write$binfmt_script(r5, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff6241d09c16e934f32391b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f2cb5d3"], 0xf4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r7, 0x0) [ 330.874576] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 10:26:02 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xffffffff00000000) 10:26:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) open(0x0, 0x0, 0x56) sendfile(r1, r1, 0x0, 0x200000d) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$int_out(r0, 0x208140008000451a, 0x0) 10:26:03 executing program 0: rt_sigaction(0x13, &(0x7f0000000140)={&(0x7f0000000240)="0fa39600000000260f1c33c4c3f96a5be57383410f3806810800000027fec4e1792b3bc4e3f95c5a0039c4e218f5faf0812d7ae3bfb607070000", {0x1}, 0x40000000, 0x0}, 0x0, 0x0, 0x0) madvise(&(0x7f000048a000/0x4000)=nil, 0x4000, 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x101, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001680)) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x46800) pipe(0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5d) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'nr0\x00'}) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x102, 0x9032, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080), 0x76f2eeb54dd00748) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x8) recvfrom$unix(r3, &(0x7f00000007c0)=""/233, 0x24b, 0x20, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000002c0)=ANY=[], 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x8) recvfrom$unix(r4, &(0x7f00000007c0)=""/233, 0x24b, 0x20, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000002c0)=ANY=[], 0x0) linkat(r3, &(0x7f00000000c0)='./bus\x00', r4, &(0x7f00000001c0)='./bus/file0\x00', 0x1000) fchdir(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = open(0x0, 0x200000, 0x1a6) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) listen(r5, 0x0) 10:26:03 executing program 2: r0 = inotify_init1(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={0x0}) 10:26:03 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0xfffffffffffff000) [ 331.362212] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 331.384492] ptrace attach of "/root/syz-executor.2"[7593] was attempted by "/root/syz-executor.2"[13299] [ 331.433952] ptrace attach of "/root/syz-executor.2"[7593] was attempted by "/root/syz-executor.2"[13302] 10:26:03 executing program 0: pipe(&(0x7f0000000080)) write(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2a4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x1000000) 10:26:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'syz_tun\x00', @ifru_data=&(0x7f0000000080)="22d839e901e030e8dac0702b073ca7e2baffa6d5c1a5cead2eb48e368979a015"}) 10:26:03 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x8a800, 0x8ac882fa94b1332b) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x74d, @loopback}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10, 0x4, 0x0, 0x4}, 0x0, &(0x7f0000000040)={0x1fe, 0x0, 0x0, 0x0, 0x2, 0x2}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) connect(r5, &(0x7f0000000280)=@nfc_llcp={0x27, 0x1, 0x0, 0x1, 0x80, 0x44, "b7a117aa7a3b5984fd8cb6c8192383e8e3d93acf6ebea3cb7128a7a614dc98868819c5bd6907889b54eedea126bbb68de35220d330fa3c939f8e5776b8ee7f", 0xb}, 0x80) 10:26:03 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2010, 0x0) 10:26:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') lseek(r0, 0x0, 0x1) 10:26:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200005) sendfile(r3, r4, 0x0, 0x8000ffffffff) fsync(r3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1d7, 0x0) fchdir(r0) r5 = creat(&(0x7f0000000240)='./file1\x00', 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty, 0x33}) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() fsync(r5) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32], 0x4) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf2, 0x2a}, {0x0, 0x5}, @period={0x0, 0x0, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5}, 0x2, &(0x7f0000000480)=[0x5, 0x85e]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x0, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x0, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x10009) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/context\x00', 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/relabel\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={'ifb0\x02\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000280)=0x4000000000000000, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$int_in(r2, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x1) 10:26:03 executing program 4: pipe(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) 10:26:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x81, 0x2, 0xfff, 0x9}, 'syz1\x00', 0x1e}) 10:26:03 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00\x04\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0xa, {0x0, @sctp_ip4_spec={@dev, @loopback}, @tcp_ip4_spec={@empty, @local}}}}) 10:26:04 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="c92117d6c9c7d90bd5812e11c4a8ad68657b36e933a2240f4d7ab963abe1fa2f93c1d63ee784e606b3ccbb4b3b1ab40ab5a6bb973aad4d492c54200c4286c1524657e3046a072fba26f87ffa8d27b2fffcaf794bd07532b3704daef37ea3a1b418b5e81532044bdbf92df2c8e15ac195dda314e64b270e5557ed60", @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 332.045301] input: syz1 as /devices/virtual/input/input8 10:26:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ppoll(&(0x7f0000000440)=[{r0, 0x21}], 0x1, 0x0, 0x0, 0xfffffffffffffeb9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 332.099636] input: syz1 as /devices/virtual/input/input9 [ 332.208628] audit: type=1400 audit(1573467964.180:95): avc: denied { map } for pid=13354 comm="syz-executor.0" path="/dev/binder0" dev="devtmpfs" ino=16467 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 10:26:04 executing program 3: r0 = socket$inet6(0x10, 0x100000003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007fd508fe01b2a4a280930a06000000a8430891000000390008000800110000dc13382d0000009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 332.251496] audit: type=1400 audit(1573467964.220:96): avc: denied { set_context_mgr } for pid=13354 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 10:26:04 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040)=""/204}) [ 332.311082] input: syz1 as /devices/virtual/input/input11 10:26:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) memfd_create(0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) ioprio_set$pid(0x2, 0x0, 0x741e) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) [ 332.429900] 9pnet: Insufficient options for proto=fd 10:26:04 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0)=0x499, 0x4) sendto$inet(r2, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003a40)=[{{&(0x7f0000002500)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/225, 0x27c}], 0x1, &(0x7f0000003780)=""/232, 0x1fb}}, {{&(0x7f0000003880)=@xdp, 0x80, &(0x7f0000000040), 0x8a, &(0x7f00000039c0)=""/111, 0x6f}}], 0x8000078, 0x2, &(0x7f0000003bc0)={0x0, r3+30000000}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000800)={{0x0, @loopback, 0x0, 0x0, 'nq\x00', 0x39, 0x0, 0xd}, {@dev, 0x0, 0x1}}, 0x44) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000480)=""/129) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) io_setup(0x7fff, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="fcc1f1b843171ac153144cde3334eccc", 0x10) io_setup(0x4805, &(0x7f0000000700)) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7f, 0xffffffffffffffff, &(0x7f0000000540)="4ecb0577337640dae05f24a622ee33a4158c52a6a795f6db5dcd1e2b81441427e81a1531e82c2622550bce61597001b62fb98c08b61339a3459be9d4620d782e6d141a327ce71b1cbd33e5ce07a93168fb781aaddb8b405297436650ffda20fbb19e978fe48c3730d3fa8a2558ce1a231929ef6e3c6ce82bba90851fc863df1dbcba8cd324b5deeff3dde5f7", 0x8c, 0x80, 0x0, 0x2}, &(0x7f0000000180)) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000001c0)=0x7) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) r4 = open(&(0x7f0000000340)='./file0/file0\x00', 0x40000, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r5, 0x10, 0x70bd29, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7f2, 0x9d8d, 0x0, 0x101}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000800}, 0x1) getsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f0000000640)=""/98, &(0x7f00000006c0)=0x62) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000140)=""/50) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) 10:26:04 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4) 10:26:04 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f0000000080)='./file0//ile0\x00', 0x4) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x318, 0x318, 0x410, 0x0, 0x410, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, &(0x7f0000000140), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff, 0xffffffff, 'dummy0\x00', 'teql0\x00', {}, {0x1fe}, 0x27, 0x2, 0x62}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connlimit={0x40, 'connlimit\x00', 0x1, {[0x0, 0x0, 0xffffffff], 0xdc0, 0x3, 0x416}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @local, 0x0, 0xffffff, 'veth1\x00', 'ip6tnl0\x00', {0x5a3b1e2cf48d2bf4}, {}, 0x8, 0x1, 0xb0}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6418, 0x0, @ipv4=@broadcast, 0x4e23}}}, {{@ip={@multicast2, @local, 0x0, 0xffffff00, 'gre0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0xff, 0x1, 0x6a}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x9}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x80, 0x1, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x20, 0x3}}}, {{@ip={@rand_addr=0x7, @rand_addr=0x8001, 0x7f, 0x0, 'nr0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x88, 0x2, 0x4}, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x7, 0x1, [0x4, 0x1c, 0x17, 0x34, 0x26, 0xe, 0xe, 0x1f, 0x3a, 0x2b, 0x17, 0x8, 0x3a, 0x4, 0x2f, 0x1d], 0x0, 0x1}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000001c0)={0x33}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="d8db897fa5cd33fc45c0364475349464ab37d4", @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:04 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, 0x0) write(r3, &(0x7f00000001c0), 0xbab230cf) ppoll(&(0x7f0000000140)=[{}, {r4, 0xb62385f370c17594}, {r1}], 0x3, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000580)={0x2}, 0x8) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = gettid() rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r7 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r8, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) syncfs(r8) getuid() sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) 10:26:04 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe8b) fcntl$addseals(r2, 0x409, 0x1) write(r1, &(0x7f00000001c0), 0xfffffef3) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x2) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f00000004c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') read(0xffffffffffffffff, &(0x7f0000000600)=""/34, 0x22) fstat(0xffffffffffffffff, &(0x7f0000000680)) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000080)=""/38) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e21, 0x800, @loopback, 0x9}, 0x1c) getsockname$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000540)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$packet(r4, &(0x7f0000000180)=""/88, 0x58, 0x0, &(0x7f0000000940)={0x11, 0x1a, 0x0, 0x1, 0x100, 0x6, @dev={[], 0xc}}, 0x14) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[], 0xfffffe8b) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580), 0xffffffffffffffbd, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[], 0x3}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@local}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xcb) [ 332.722208] 9pnet: Insufficient options for proto=fd 10:26:04 executing program 4: futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000000), &(0x7f0000000ffc), 0xc7fda99635440eee) [ 332.797996] 9pnet: Insufficient options for proto=fd 10:26:04 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff01800000ff0f3b50ce827ce5bb6964c5bf7bda04b4c443"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000015ff0)={&(0x7f0000023000)={0x14, 0x20, 0xaff}, 0x14}}, 0x0) [ 332.929760] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 332.997814] binder: BINDER_SET_CONTEXT_MGR already set [ 333.008741] binder: 13354:13358 ioctl 40046207 0 returned -16 10:26:05 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0xc) 10:26:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') fchown(r0, 0x0, 0x0) lseek(r0, 0x0, 0x3) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={@mcast1}) 10:26:05 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = getpgid(0x0) ptrace$setopts(0x4206, r1, 0x401, 0x100020) fchdir(r0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x1ca) sendfile(r4, r5, 0x0, 0x7fffffa7) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r8, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e732366642c7266646e6f3d7703fe95291a0054b442680ddc8e3bd4db5d73aacea2eed2befb2bcf9778dbd8d63299cf99843f1e24e51d8edf1b755b084a6a7d583cd1493fcf9e28cbae6cbc71b92fd9c320039045c0468e16fb983ac0ff5d75c3400d42c711f8296f54d2e64f68c21335c025fec0", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:05 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x0, 0x3}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) [ 333.147725] audit: type=1400 audit(1573467965.120:97): avc: denied { setattr } for pid=13412 comm="syz-executor.4" name="oom_score_adj" dev="proc" ino=55489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 333.280012] audit: type=1800 audit(1573467965.190:98): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16609 res=0 [ 333.336182] audit: type=1804 audit(1573467965.190:99): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir710818192/syzkaller.zCDYJR/332/file0/file0" dev="sda1" ino=16609 res=1 10:26:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x403, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @local}}}, @sadb_key={0x2, 0x9, 0x8, 0x0, ')'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}}, 0x0) 10:26:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sched\x00') sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 10:26:05 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x9, 0x800) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1f}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f00000002c0), 0x82800) write$P9_RVERSION(r2, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r3, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x1320a6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x40000000000025d, 0x0) 10:26:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = epoll_create1(0x0) flock(0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4000000000004e22, 0x0, @ipv4={[], [], @local}}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ftruncate(r2, 0x208200) geteuid() r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syncfs(r1) r6 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) 10:26:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000440)=""/250, 0x128b9548) 10:26:06 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES16=r5]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:06 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fb, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) [ 334.138016] audit: type=1400 audit(1573467966.110:100): avc: denied { name_bind } for pid=13454 comm="syz-executor.1" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 334.151024] 9pnet: Insufficient options for proto=fd [ 334.169124] protocol 88fb is buggy, dev hsr_slave_0 [ 334.174750] protocol 88fb is buggy, dev hsr_slave_1 10:26:06 executing program 5: madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xa) 10:26:06 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r0, r2, 0x0, 0x2008004fffffffe) clock_gettime(0x4, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x0, r3+10000000}, 0x0, 0x0) [ 334.197411] audit: type=1400 audit(1573467966.110:101): avc: denied { node_bind } for pid=13454 comm="syz-executor.1" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 334.225146] 9pnet: Insufficient options for proto=fd 10:26:06 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r3 = creat(0x0, 0xbc9dc8fbd81cb4b1) gettid() pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100), 0x0) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(0xffffffffffffffff, r3) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0), 0xfffffffffffffeb0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0xffffffffffffffa7}], 0x2ff, 0x0) dup2(r0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x2) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xfffffffc, 0x0) preadv(r4, &(0x7f0000000700), 0x31f, 0x10400003) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) getsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000040), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) io_submit(0x0, 0x0, &(0x7f0000000540)) 10:26:06 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) [ 334.252046] audit: type=1400 audit(1573467966.110:102): avc: denied { name_connect } for pid=13454 comm="syz-executor.1" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 10:26:06 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x1ba) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000740)="9b746e719e0083260483a83833a31c2f97abe201d503927c56e9ad3c77f3c0890782d41b1e4e870347cc945037cb8db5dca60f23da15c42871ee6425d8908ea2645c2300b6bab0b8221554e4a4cc457ab40bbb93d8775ed1f3d36e3665655ccd61d887722a001a62bf8a03c78b64a21ca7d72d78973954c2c7fa78e168aa2340b9af52b4d9c7799ffce49f3e32c5c4df78d65f043042af95641c75d733a3650f39ab1eaea1002173eaf788983b57ead080539e1dce59d4cc68ff9ff3025fe1ce3bbc261ab4f7ea57e6422842674ec905b15be0cd5fbd8ccc085a664c53983abfe2c7ef2ff59384dc2344208d23f31e81fbf06395d16b3044aba8fc0761dbab9a23350147d430e2d91ceb2691cc1398a13996e28644f1330c3c01b4a1ab9ecfd93533c0c6c3949f7ee1a9cb5471198d407f26cdf6351298281e0d4a528f93c3ea8aa5548b64c11918e55d2c542b24b8dba44fd2b8f55922615f658b234c83338655613fc05b26bbbb8befd04170dcf7da6e6e9913d73679f833d1e0799050b392b735aa463afd711b8a97f503a8d9b0a02767ae3a757293511dc0dca26d6275671eac3b8124259e82855bd62376a8028c01d0f4e1b7c34d60fcdb1d0c968816b34bf9496be7848254328ae0e1114bca6fce3d8a51cabfe224d2c1a814591a446bd14d0020444ff8321cadc6d400756121f6c0453792bf1721f4a11537df9cd80944aa5979f36bece828e4e97f0f0921a1e41a2a14258f72612d85a93856885624496797f191d33aee3b3555573517f4927ed8c69a46db01e964e14b6ff2723f13f93f8ba4ba656164b1bd96fe5b59a0b24e8f7169e2574d0b9b394f68a2e8a8545012c070b8798026e4089dbec669b2cb31386215c4eda212a5382b48353165ff5d428ab8625e39c1c5c82118451e059038c758845bfe26e209efbdce93377c14fd4a6765f5252bb66671a4816fb3dc2a72d94014f882f69256f4913c88d375646488421ee2d1250deaffa2a97039a5be8a7872e1a43b464a4fab6c498b358c841e20f26418445edf0972ffdbda1df9bd4231523062f3e55d4f9184f97866859bcd156ee637b43302187c3a518eca6d585ce3c727d2c83754e8c8d7ebdef1d85d5e0a35de0c0fe758a456c81086208e07802a34f6af1da04249a181a8f070d6d6596e08bb2ecbb7242d846f6e6210f43b035cd45d10eba90c0cadc4f8da06f4c4e850d64599c4316af6c2cb1c7b3b8ae2ea32980462eb85bd2798a9485c9642e8fef2fe26a9636c84bc718c9d62c371e5252a39c0cafb8658ce101bb1ab090990358d53bc4675170b403644e9f24c132063cf035dbe17878b1bf295f104a239318bb19a9b3ab43e81812736021880ade3d2fe9c1a545cc959decb7933f924cb5df334beacde1557d1e144ae15223cd5b3ebcd5b68d6ac967b9fe6156d3d508518697db2765601766ab826b4faa17bf2866bc1f625aa85142fdd3688d1daa47db851a64fafab541d6adfc9aae937a960a69be95bff9eee34b91a4c6a212acb8c5f55804a7946a750bcef0f76811e5292cd979ea59b7b45ecabc642bb4f0b3b1939e55cd6c8c8fcd3d2f1f62dd402fba8d8df1264fbd50c265eef9ffb22a5d260d44981232ad89cdac1f27df0df605028c1c1c58d4501aa4cd06507e17e10a1d76b24b1cff4252b5f3715640e760a4cbc581fa7f735149380b3458f9fe6d29ba163332440bbd73e3d6b93b8b05c5ab76e6b69edc75e89dcc7e3b9ac6f6b337e7f0a255db7fe788e1d8e2200e3be51ffb404244cb81aaa04f861c09f13424d9e51d3fe5332508d0262fced43678420197af7f2aa91abf94c94cc5e49623dcd16df570faedfd9f7d092ff2e80dff90a7f620731c387f3ebf29f6c154b12361ec32d7fc78d4d7443fdce3e2c1927443e2488ce90a8b1ad6d2b049f4e7309efe7a4ed5fe20685dd4fae47042800944a197894761cad84a8900051bb9ac9e10bc5da5907e314f1710bbc65cab4b7b0824233d9e0fe7e78d24779df23637325e14f36278230ca80bb10b8cf7954d475438e04dcdac7f80ee0dfcf386be5da5de97dfe10a4a8f5ec91fa45fd767610ac1b225c7d8b96cc29a3a75cfb65043c010df39d9f6c5d681470c1f56083554549d12fa563a5355f1d81faffe6eb9e3eb18ec75b8fea917709fe90c21039980488058f60bfb5a301b0f167148d7def83356c275a4b05a98c45cb5f37ce15f4944c7bbe7bf9b255acc83435c02a70caa7b3d81dd5dc563bf06f660942c380b1c4613472f476194d22f52420d9786d2541866595c33df24b431e08afe395bdc5036eaa6ada2b5920d92c306264de253ab1d16eee9631e51d6c5d2ffdae6a318444b219b42680f4f13f148f6040767f161fd9da4dce932f6148f7bf7a9736ce33d9f54433e103bf21d565fc00fc6495bc1023807fa83dc2379ec1d6ddb2a22a6112af5fe426d7efb60df0c29d20a4ed15713251ed8230c60db9f6", 0x6e3, r3) ftruncate(r2, 0x208200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r2, 0x3bb7) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000540)) write$P9_RREMOVE(r6, &(0x7f0000000280)={0x7}, 0xfffffffffffffe93) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x808045b5, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, &(0x7f0000000600)) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000400)) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r6}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 10:26:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffffffffffa}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000500)=0xfffffffffffffffa) listen(r0, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='\x00\x00\x00\x1a\xe3\npL\xa9\xf9\xe5\x9c\xfb0\x97%/|(\xc5\x8d t/R\v\xdbxl\xa9H\x82\x00\x00\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x4000) r5 = open(&(0x7f0000000380)='./file0\x00', 0x804, 0xfffffffbfffffffd) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(r5, &(0x7f0000000180), 0xffffffffffffff81) ioctl$int_out(r1, 0xfd, &(0x7f0000000080)) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000300)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400)={0x0, 0xfffffffffffffffa}, &(0x7f00000001c0), &(0x7f0000000280)={0x77359400, 0x0}) io_setup(0x3, &(0x7f00000002c0)) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0xfffffffffffffe3a) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000018c0)=ANY=[@ANYBLOB="21fc89b66ebfbddbf119539d43a6c2ff3e5e90b6aeefc152f06cbd7fc401f3171d6991e3956489432bb5cbe236e730c72690396a61e4471b34382e144ba3abd4b857cb8689e5f7812e166de1e0134089d7d11dac5fdfcc6aaf368dba211de9a8fb1716d8af974d5cbb6c87963d65afc0da43838d92f34b2e972c3500aaa6c9d54fb7b53285b7e1c4cec9f568337b8f65776f5b2cbcbe7f466d53e84cc9f7a1b6bfcf8a5bfa03b7d4b8d0642567a840ffa4ea128db3d5b8a7381cb6a34c5669b2fca7257aadb7b534dd2b0c0c2fb5a868b2f124095b5e3de1a4d291760bd68aedfbefe4c41eb82df27b06ddb208aea6acbfe814799bfce1d4d6336459035359a90a9aba77d15af20262b1bdcf8b98016e67c9628ae910cdc3e68c901706a2a1fac9a213cb31dc214f4b890d8ac5894054285f1580e9fa73f85744d767ab9062e6c4426049c2a2400a7f508f8e65b0768059e35d8c3fd284c23a6696ff8e92dd7c24755612a0606bb9f469dafe309a710aaf11e6688bad782758c8cdcc961a3a670e8efe458a8c4b93843210bbc153b76a8d693d2e135b88902a0ff5487b8287ab185aefcaad29a8fe663f6b4e44cbe1b24ec5f1a5fa2772f05a0b4fe4ff3aadea367ecd05cccaf4888638c320bc0eb35681589dac90563c02f7b30e889941a2bc2ee15d4ac9e23513b5814946f633a04c19d4e500138624db19f186b00333316165e36f06bdda33cc90ec27d50cfeccebc0fb5ba28af8d97797d4e95a52498396b56b2bbb39f4f983a4d2d4bf85155a5f7a9320f89f35221c362f66a90a5df8c884f338acc99fb7b0cfe1d73e1df0a5e66fdbcd9398499605cbc558d1ffc3a9977de399cc4cfdad75db8d03daa651911cdbb52b040262b35b25b2e89f0024b28f7441f47bcd14f0a3dc24ab03b4c7e261f847f9602ad2a880cbb2465b5f6d286fc258f0c6140adcb7a698edd55bbc0b5e7c35074eaa79945734f3f98c6c2d74ddb3649ea03d47842e5de1a28c49affb872eba0b60f918f88bb5bb386ec685e4020d368b2364721a0acced1b410429a4192c890d1a084928a3669ece123d97e95f1ca42fdf03ca5bddab7d17ed594433d54b787023db75816be9478f732c75b1c992e5760859402db7a2a4e1190ffbb23588da75861977d59d563649e0961002554f5f573fb1cc289e2213e16f58b00ab7b0996dd4a9ab738ee4333ada91769aaf812a539eed8b4cf9b78994e46900321060df6e83dc19c193016ca5097c474c5abeee805de023b1fee5323cae294079dbee8ac1de75400d48e8b38c569417aea7a35891bb026add28d05b41ac0bd5ee82521fe5309898cd161e3c987c6838382fd3d247a8af153388c10ff22a27de3723ee99cd294eb56edcf72aae39a7841709162cff96ec44ab7dbdc577fac27def716c4a659e7eec024516c13596c38bd4be741b53ba43b0478ee3d2ed12dd1f4937250e492a0776bbb5e9fa611628062e6a53197d3dedd0fe07a3ad684b82dfcb32222f92075f9643246ab02d7a5ab1b8e016e6243f684e8b8b1e9f7c3f13365d1c2a345f6ac6d6a74190a8c4e5a38a126f9a1f9f2aaedc77047a0c0947d85e615babddccde97c702e4cda1e3e72ded97e77c8b9aa777d69d6666d62c2b1fd6a7c6eedee71f930340e82d4cdc470c2108fdce27378b7e2df0dc29bff1a94739fe1d8270eb2a059970a9ed282c416fb56c6b65ecec312d460da8a421173ecef95513e4ffd6490b6271583ba9aef24ed96dac64e3149a3e3e594a01a22e62018ae50f510f8c296894c476300420d667eaedb2ca5c107aa85aa4a8de04979052ceea50f47c6afd34d8087b82dd5f593f51fcfc9cc3ae87718ba518978b87abc5248e5c245f797656e65bb3c3dc1b2fd166e2d969ad53f6797aa10f1185f131a301cae46a24002d8890f2f12aecb1bad6fd967ac05a14633521b353bea7961d29d75f5de70b427ba02f47604c0a7f35bd8927f44121e5261fc47ea588afbbf2e2e0221fc2f212b31f4d74f39cafb7c33b212cf626451e98ecbba263fc0ebc35f716d9b8963cfbe036f1bbd410649a821fe1e97f47d60fd9b551922832810c9642a2c6cd4ad36fc84aefda0f15492b93861a541302655db76dbc61578b7757d833c8b55c3626c189da4b8742fe8df8c279af318867e3ca8f9446bc94d272b02cab556c3fd2af8da9127570c2e5778000c98bfebe233b2519136760c98a740886377774ea9569edfd3ce0689c4345c52f2fdd2ea48924f565bb016319793ad6ddacc1d84f23ce4bd1e37bc0b7d1471cb5bd78c03f00bede44decf1fd6c417ff8ed92034bb8809841bdaf0d69c4e20bebf235841b3766549304c9e37eb0db456021588bc4924d42945bc62e9e855b52916a49ac03905e6317a02aad9929218efcaf9993d572b86b0d83666aabdaef636e019ab72e1813d945c14b5a6a0b83660c916683a83d98a4359e47be69fe75540e542744a6a2de142f2e985f0bbaea58ea368be63f93bc583846eb13fb7cb27b101ef3640fb77cdb4f9530dd02805efaabdfeb320e218c0d12bbee0bbef201e14e4fcb64ef91e9fe3befa85307c84c09c7339675760a523d9cdaa032b3b962a693e71a7c6b915ec7fb3164e5efa7f78941d9a103ec89973a2ac3348f42c88249ebb69d76f83a8c9b4bb6abc131ce64aa2b323713ee0d51cd17f3791f6a77f096d28d6cc83e3b2b56613f0dc9f16a752fac729e32768f86125f777caa2bf5e71fa6e47e7cd176f7f2a5e0514ba0bf59c037f44d2c6c88f13fdb140e9e50621e7bbd9a2dd1d3620676d7f1bb206da050e4341604f68fc08757eb6423bd46b1e5dbe0f84084b1aa6f94c79e282773413dbf1f09c05b06c96240788108171ab5d11a19d5f9eb67ad3f45cc0804fe83173a037159b725621e4f7158b092cc322bb2d222cca94f5c2a9e60ba59b872aaac92f345e10903c694e32a1481bb2f2eddddc4c13ca119a1f15025a008f34de76c3d829f637332176ea9e54627ea5e3a4b7144a06cec7bc9434d9465139dd5b6a9c4a09163c69a1fb8266ecefe084cf7b7dafd517bbaaa9b555c0b23b6c34cdd60f1c4cb3ed05fb6011563f8b085697a079c1cb349e0790e9414785f44348ae1d7f1543418bfca445d8ae7fe83d4af2892bcb601b7fd3abe6fc4b9b07365bc4d6dcbe35dc9761017578d4ded3c84bfea511f01cf8976364f1b8529952e087f8375407b374399aade6dbdffe3367e59a450da66e09df67fe49a9ed508d38f5f004a88f1d6191bf5ec0ff46cc92262a0c9628a98151c00e53d75f79542a40b0cd7b581cf638940517cf4cec3fef21822712ff0a1576d25bfa6a4a91248acd0c6da0926b7fb5d22e0bd6e49986c8b2cfebaa9e74da182d772e99449f97a76f4ecee89461d249b9eea9d45506050531f4cd7c89b12f06cc8b63bf9a6525e6741100543c19220e7e120a4fd92e8e5c3f98706401785abd5bb3bf114d910a55da665017190edf6645dccf2a5de3f3b83d377436421ed1ac19fa804c0e8c6aeaa45066d9d4cd7e848dbdb38102cecad3982d0344df4ae60ba81b45b32bdee7ceaf6861a6f80cb846dcbfcc5d53de49101d824656a84f75fa5c07b21c66063d044721f18fe11126b2dca52f8e5ca79f90771efb12eb6368bf3faef67f276dc6e8452d0412a56bebe1a0290a5c4cdd309665151becd9172c7b41e01fbec89922aa87bbb63aeef0fab27b82c7918f5219350c3eb7cab23309df5489a8deca405906179a015e4ad68a758b83991391592aa1d433708a15b68d9cddafb052bb60aca08c5c9e96abbd103f9709f4b1f13cae419967fede30882ded2019312051332f1d901d0e333c2a6f92f07c2aaaafa1f388fbbd0b072b6414ad2d02700404a3342c9699a211814b340d16baf502b3fb7c4b6e74cbe389a9e5392e36720841b4093707660312602bfed311a47c57096a6aef244709db68c441564d6da90da4d8d28c59cba0c66bec9001f6004c8acbe5ef7a4f3aab1c5a422ca586888b2cdaf8afd6ec3bf4d8d02140ff2140246e5306408f3344d31602c2648345051ac3aee62f101e5d4c6ff48c8c6616eec6fb9ec7cc8a902101c4e05cfada1a7acc717ee0df522afd436059cf949a9fb249a82597d3803124312a08cb274b84de5bf88ce5846a51a1aec9a70cef22a1f57efd3ffa4fcd23b36f9ea1c133e29a91743f4216c67b4d0608914ab03eff1c2cef16b9d7fce1ed7bc8ada817439c091e166e49474863d7c60b09a8662163152bc3b0520198797a9067d9e2f15c6fc808fdacb8644c38854c37cf1148cf77cb058abae85987d0b5c9e814bf4456755e22e9482a87321d9706f0989110c4ce02e2e43d98aafb764d5b1635d094cbb5137fead8c6b9623a098efaa4cb4803ef80d323b62ce81b67f44f4d3ad5f0f795eacb22bb08404211626da1f7f64c9365b3f5be6a86e86dc80b2c01dbcc14ac82b0e2d5070fd77f4a0929191e705771260f2fc4c18fd44895317116eb7f19ae3537d796f3adc8748f3aa7d5bd7ce9806c8e88e0d3873002c1b4479761a5d789d9ee5d8f9b73af65612204915c4bd3ba05d0bac453909289c50aba5713de147cefda1284328dce1fa331a7c773e81d964854bb56f69a8b7e4d2a9226b7aa35c3c0fac1e9d3efe90b8d2a6ccc151a7b595b4df9912a99d97d7e59d77f66eda166deab082ff94dd8d6b17a656adc9cbb02627c8986fef55789a3219ba925c527a967df832e194aae65f178015693803e0897999c29cf12f4f0d5434b4304dbd3af0702e0ff218a3e8d97befebab729fa370071538f641156adeb1e074674845018332b1fe24f6b7ce9ba53d612f0561b4e579e0b2501ac955f0b76e322c8f55d9365fee05004c1b1146d048477577bb35d824c3a99fa76f2cd8f52e88e05cd9a47cddb82146c399e1fc9bc520e63ec36f88a9dcfba89758e2932d2a1e471ae76d1fd65298959ed2f45d26e30512a930f39ad19e2deac7d11ac7a9cbe8d4cde39bf4512fbc846183b81fc4a698c7684cde9335e9b821db6897b7fcc6d839391688161ec97a9cf2ab6056d9412af7c48db1d2e8b531f739657f7ec1fc3acb3407485a802e58734cd922f606a2ca5518be68abe92a334801ae328e081e0da3984ddadd19f9748e2345f2d76217a1b544caa4a7a0d8c9be77a110e4360a71279fc806f95235b9bbaeb447345f10e9fd784491e1b15105c7afa66f336156a0ce28422d061d789e4ebbb0fd069997187ed11f94c133922967deddc1809bc52bf4c477249483c6ff5a13ab90330fdf4e0845260fffac39aec9b55a7672af6be2eda7798b8a96d72d6ca60f5d8335becc055c8209de02d2aeb182d36c57743841cd14442457084b0d68b74f2a0e722727b09355ea54dcef2cf50761bfd3544e1cb314d0da6d791ed37f6cc1ceb9e845dc9cf674b6d511cb1ea3962b37c1028eb258d90c4caf8400f86ac41b6fa2994e73694d0d7bdd96459dc21bf4bdf59f290e44f864fa7857f7b76236a2670524d4ef6f4b4dd38faca31c2e2bbb1dd864da1e108f6b289f5833c86e8c050c289a8cb83af34fee2ec1faa5a911274e795e19b3365ff2db1fe9e4429a7295f586c376cfd8d218dba6afd0059f6e0ace413b5dc7563c0c1004ef3394321bb7a74d707760ae9467f73ba9bddd306f7e8a52138436865d56a942b1aa5e957183e61ba0109af84f5c5ef57b492748360c0004f167db4b5b25b869cc07d2eacca42a3cafbbbdc9784000000000000000000000000002530031112512e727179dc84ed8cd0351f7dd10c1e3af83d971f3641a68fce216208c506ea62f229b9d6976956c7536fa6b830e2dc342d21fa328443e3a045a215d54661b40c2cef09f53617065f1dd3ef734cb66946e168e30d02c161f29c0da4bd0814fc91f60dbc364d1b92daf36e3229fe07a6f8dff0ec70fb44e53023de1a3483d16a2a79c79e5e1689664619a0a9dfb8327e3652e6dfd44941257a3fd39ab4f9c802c0ac00d05f2d5af348151bff0906dd9c5740a6ae12a0d1bab24a85fc8a9b3156bbdf7102d6390f2342085b82937a567ee14af079fac1e4eec7137e8155cd0ffb459a984002985bf43eace074bb17d25cb83aaa6d69942d423c4c1e08163926dad0cd218d56723010e7038053ba2a23948f8949b9a49aa1dc002f37bf84b65c6995e1abce5c237895a00ba1b13bc8605ae244b70fe045a1b30eb6fb6ace27b91f06335deafc", @ANYRES32=r4, @ANYRESOCT=r5, @ANYRES16=0x0, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=r2], @ANYRES64=0x0, @ANYRESDEC=r6, @ANYRES64=r3]) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x7, 0x4, 0x5}) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x4000000000001a, 0x0, 0x0) 10:26:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000500000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000f00), 0x5, 0x0, &(0x7f0000001000)={0x77359400}) 10:26:06 executing program 3: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000100)={0x1fe, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x251) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000004c0)="5d56f1319f269c974a6e5d799fae98260b7f3d35d6e4df3691bf84ec57e0b95b843df279b3f15a4018930ff7459b584a4dac8109832688eb86b219a7e2e4e94dcc6194f3d887e7be8af0a7e29b840f038b603a2d4abe083d305dfaae", 0x5c, 0xfffffffffffffffe) r6 = request_key(0x0, &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='\x00', 0xfffffffffffffff8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4800, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000300)=@caif, 0x80, 0x0}}], 0x1, 0x10) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000680)={'\x00yz', 0x2}, 0x0, 0x0, r6) fcntl$addseals(r1, 0x409, 0x800000000000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x800, @local}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000180)={@dev}, &(0x7f0000000380)=0x14) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/checkreqprot\x00', 0x100, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, 0x0, 0x0) 10:26:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/11, 0x2f8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000800)) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x16) 10:26:06 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f0000000080)='./file0//ile0\x00', 0xa61bc40d04c8353a) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:06 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1502000065ffff8180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:07 executing program 0: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000c00)=ANY=[], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r5, 0x0, 0xfffffe55, 0x100100002) fstatfs(0xffffffffffffffff, &(0x7f0000000700)=""/232) lstat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) sendfile(r6, r6, 0x0, 0x80003) pwrite64(r6, &(0x7f0000000300)="e54e77d103565b113288c65f38a22a25b637db56783e677cb932bbfc301d860ae5c69cb5c454ea010bc2fec87e7b768cde79d897b1ee9c85e76c4940107fe0fb82a2d93874732c08198baecbb06f6b920001d462f75bbca6dc40e794afe797eba6b0b8b36f91bab095160e12eb8a3e61fad4d0cebe56b210cb258618b0e488b00e2933feb30487da77303bcc2cf7a122ef9937032dea5f98d057f8e411fddbcafe2605fc7895a8e4d44fea8a80f0d9cc83ebca0d86388bd9", 0xb8, 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r7, 0x0, 0xfffffe55, 0x100100002) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000140)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) [ 335.159653] audit: type=1804 audit(1573467967.140:103): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802109239/syzkaller.ynBSNM/441/bus" dev="sda1" ino=16833 res=1 10:26:07 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}, 0xa0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x8, 0x4) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7fffffff}}, 0xfffffffffffffe86) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000140)="44aa269999362eef40998437160cdac0", 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7411616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) pipe(&(0x7f0000000180)) mkdir(&(0x7f00000001c0)='./file0//ile0\x00', 0x0) 10:26:07 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f00000004c0)=0xc) lstat(&(0x7f0000000500)='./file0//ile0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r9 = creat(0x0, 0x0) mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, r9, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r10, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}], 0x2, 0x100000) setsockopt$rose(r9, 0x104, 0xf8769830c576c9a9, &(0x7f0000000100)=0x3, 0x4) r11 = geteuid() r12 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r12, &(0x7f00000002c0)) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x210000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB="2c7766df215bc2e95b00000000000000", @ANYRESHEX=r9, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRES32=r9, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR64, @ANYRESHEX=r12, @ANYRESOCT, @ANYRESDEC=r13], @ANYRESOCT=r8, @ANYBLOB="e5782a020ea23a1cf13147e9a1d90f1fa312eebe80218f71844bf7db304c10a57b75eaa212202fbdaa943e1839d4ea7e30037ffec34757fa11050c3243f410ae02394ef770d62929e21c4fbad2360a9fb17e54b6b2b32c9f37", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRESOCT]], @ANYRESHEX, @ANYBLOB=',version=9p2000.L,mask=MAY_APPEND,uid>', @ANYRESDEC, @ANYBLOB=',euid>', @ANYRESDEC=r11, @ANYBLOB=',\x00']) r14 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r15 = creat(0x0, 0x0) mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, r15, 0x0) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r16, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}], 0x2, 0x100000) setsockopt$rose(r15, 0x104, 0xf8769830c576c9a9, &(0x7f0000000100)=0x3, 0x4) r17 = geteuid() r18 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r18, &(0x7f00000002c0)) r19 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r19, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x210000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r16, @ANYBLOB="2c7766df215bc2e95b00000000000000", @ANYRESHEX=r15, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRES32=r15, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR64, @ANYRESHEX=r18, @ANYRESOCT, @ANYRESDEC=r19], @ANYRESOCT=r14, @ANYBLOB="e5782a020ea23a1cf13147e9a1d90f1fa312eebe80218f71844bf7db304c10a57b75eaa212202fbdaa943e1839d4ea7e30037ffec34757fa11050c3243f410ae02394ef770d62929e21c4fbad2360a9fb17e54b6b2b32c9f37", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRESOCT]], @ANYRESHEX, @ANYBLOB=',version=9p2000.L,mask=MAY_APPEND,uid>', @ANYRESDEC, @ANYBLOB=',euid>', @ANYRESDEC=r17, @ANYBLOB=',\x00']) getresuid(&(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x41000, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@access_uid={'access', 0x3d, r6}}, {@dfltgid={'dfltgid', 0x3d, r7}}], [{@dont_measure='dont_measure'}, {@dont_appraise='dont_appraise'}, {@measure='measure'}, {@uid_lt={'uid<', r11}}, {@fowner_lt={'fowner<', r17}}, {@euid_eq={'euid', 0x3d, r20}}, {@subj_type={'subj_type', 0x3d, '%'}}]}}) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r21 = dup(r1) write$FUSE_BMAP(r21, &(0x7f0000000180)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r21, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r21, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r21, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x1ff}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r21]) r22 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r22, 0x40086408, &(0x7f0000000140)={0x3, 0x8}) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:07 executing program 2: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001780)=""/109) read(r0, &(0x7f0000000200)=""/250, 0xffffffe7) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000001c0)='./bus\x00', 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)=@generic={0x0, "ff80f096dc909d329774e6a8dade60ee2bdaabb4abb857eb5baec14815f0a69bd69feee1c43c775ac38e40b47b092d7cc165e503fe31d4a94a66d3c1b3b41af77425d24669a3ca462de284e1169bd5babd3312ebf023fe460ed630e38452416f2d51ff14660be2eed6bba6e5352188bd025b6f60cc8bc400a25a3350e207"}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0xfa}, {&(0x7f0000000080)="5c854701969bf896", 0x8}, {&(0x7f0000000400)="ff8d", 0x2}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="0c010000040116000200000086afb64558f97adedd0deedc6fb89606e3669d9be2819278a6a0f689dd4964cf6363b52906b7efec092c6a9ab788870f124aabb3411a1cfdb6a7035269c639a2a1a651fc579a009907c6506a781453fcd56eccc3be8b7272e4329d8c3a853403c9c0a8296f0058cd0acc3bb949b12bf9d69111b58f1ee6dc3c3aa9c381efe29c7aab33fcdea556bc3fd8586a31fdf28a6f70d82b9341759cf339e4c14fad61dd609fa214155b529388b71a5e159352ffb817cf74239737bf533adec59fb0ea217add50fb0ba265dfd23ac67f5e71ceaa7bcccf9bb5a9ecd0863c0183a601e3306aca3dc2fe4a3a32249cf82e60fadf2b00ed5f8378d640e60000000000000000"], 0x10c}, 0x40) ftruncate(0xffffffffffffffff, 0x9b) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000300)=0x20000000) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r5, &(0x7f00000002c0)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x10}}], 0x10}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f00000005c0)={0x1, 0x1, 0x1000, 0x90, &(0x7f0000000880)="2500d7371f340506472fdef1fbca749efc592ed16a6c711613b5bd6484a8d1a57f156e391c297b6c586d528ecc93c75589fee10181e038a60807e4716667999887176e7b5ca2797bf63a260c314e0e7695625f48f0dcb2e6db6422ffa9a2b0a92230523751f5fe3eb8d6b19d421f0ea0437111734e653a9263e3977608f93a8769400aacd31dc5a3cc8867e761d93744", 0xdb, 0x0, &(0x7f0000000940)="0a00a5fb20c0a5fb999037cdacb95843af4981d3853f988253c11719540a50d8cc0f635a0124faa0b29bd9f436737ccab66c78d6f875f7b6c27421bbe2b0da81eb4f9cd458233c734905fad3dd98158b4fd5c818b95e8f8d5a52e47eb5b653315c9d1f6ef5935f2e9644999782de2c963f9cbe3687265f2b2a717fd5f2d7bfa7b21f8be82bc9451cd0a41dd98702bae1fd7be53363c38872377de142fcf6c1216064a76ffd37e26bf40c1248a3144e1f2740666e3a12a27de4b3b1c5c61d830f7b59c5c862d63415dcebcbdd3b54fbf16a2ac6d877718dda2fdd2d"}) linkat(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000080)='./file1\x00', 0x400) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'nr0\x00'}) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x8, 0x401}, {}]}) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000340)={0xc051, 0x1}) fcntl$setsig(r2, 0xa, 0x25) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 335.465460] 9pnet: Insufficient options for proto=fd [ 335.485350] 9pnet: Insufficient options for proto=fd 10:26:07 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c7b83d4439368c30ac30f3cb9bbda1d7fd150cf4fa57e6d0cb2bcde774aea4e75894406c6acd6855d6c7d6efe74aa1127f322a322946db34fdaa07d99220d48811a6d4b4d4aa679b9cbf8b3d7643b60ab1b41948c6d99683577a3566564a8137a12411de89ad43fbfe9a65f2835b6f29de995f533e80bf7f4e68fa805e841bb1a287a57fb9c8aeb62c5975cf520227638c9da521beb459b4d30673fd7e0c9abe3d8c62d0095aee7"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 335.517579] 9pnet: Insufficient options for proto=fd [ 335.524804] audit: type=1804 audit(1573467967.500:104): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802109239/syzkaller.ynBSNM/441/bus" dev="sda1" ino=16833 res=1 [ 335.550119] 9pnet: Insufficient options for proto=fd 10:26:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/11, 0x2f8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000800)) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x16) [ 335.644356] audit: type=1804 audit(1573467967.500:105): pid=13517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802109239/syzkaller.ynBSNM/441/bus" dev="sda1" ino=16833 res=1 [ 335.689253] protocol 88fb is buggy, dev hsr_slave_0 10:26:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast1, @remote, @broadcast}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/79, 0x4f}, {&(0x7f00000000c0)=""/128, 0x80}], 0x2, 0x0) 10:26:07 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, &(0x7f0000000100), 0x8) [ 335.694365] protocol 88fb is buggy, dev hsr_slave_1 10:26:07 executing program 3: mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) lsetxattr$security_selinux(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 10:26:07 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(r2, 0x40000000000000fc, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) [ 335.829743] audit: type=1401 audit(1573467967.800:106): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=unconfined_u:system_r:mount_t:s0-s0:c0.c1023 10:26:07 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) [ 335.905742] audit: type=1401 audit(1573467967.880:107): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=unconfined_u:system_r:mount_t:s0-s0:c0.c1023 10:26:08 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x5, 0x9}, 'syz0\x00', 0x11}) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:08 executing program 2: 10:26:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) close(r0) dup2(r1, r2) 10:26:08 executing program 0: 10:26:08 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) socket(0xa, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) dup2(r1, 0xffffffffffffffff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) write$evdev(r4, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x5, 0x3, 0x6}, {{}, 0x1f, 0x1, 0x100}, {{0x0, 0x2710}, 0x3, 0xaaec, 0xffff}, {{}, 0x5, 0x6, 0x100}, {{0x77359400}, 0x5, 0x1000, 0x7}], 0x78) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000bc0)={&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000840)="d64d5ceacd1ac1879dd27391190bab66bbd16a83876b0d0f62ba4be6358fe07009af1caf3a95def79d9773b573ef3bfc5eb611cbbc7c405a573f5bc384c6b0b33e32258ae51f89c3b66dd35f3608bf0e9e6fccb703df61f8e22a8b21c2ea7197888beef4a29607367cc0f103bdcf7292d2c205", 0x73}, {&(0x7f00000009c0)="142f2afcdfa792c2a0165e4176b118ab6291a05c790a8d6e91cc09356439b7ed93a36883f65520362ab98ae9b820d4fe92994efadcc3af730de3bb1079dd7d2909079c91f9eab93ad8c93a744930a3bb675c5798ae22c35dd8a79ad580fc97c2c781b8cf0f7a220db98074940e282ffd2f303e8e", 0x74}, {&(0x7f0000000ac0)="c76df5238073fed4569fa588b0537e20d8c86ab229b698e6b21046e8160a1225314aa1b596784d7695dea74a108e2f3644b586593e3a59db28f03af44e8604fbefb19128c4f3ecd87ab204596905338a64730c39c490cebf173bb1e083c0248507542b05566ae73a42d51f46ba23a45c6a9fa9b0b528aae403ed53c4bf968cb8bee7ff39296c9f2d2914c5992b5afc6037a8b7afd80ae64723895ad907a6867ce251456f3ce3da5816798f1303dbe032dc912920", 0x4f}], 0x3}, 0xfb5870e019a85091) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r7 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 10:26:08 executing program 0: 10:26:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/11, 0x2f8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000800)) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x16) 10:26:08 executing program 2: r0 = memfd_create(&(0x7f0000000340)='dev ', 0x0) pwrite64(r0, &(0x7f0000000100)="bd6e9f0ff812ff87f612c51610f545fbc22e9020023752c60dd0831c1683ef9da9218be5497e16f588044f15769cb6751ca4a59de1fddf80433eb633125831edfbfd2a7627bf078f", 0x48, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f00000002c0), 0x0, &(0x7f0000000040), 0x8) 10:26:08 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm], 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f00000006c0)="bb120a7889345606d132dd8b80966668658b89fc789da6efcb35f7645b2382f095cc6de23040b0d6e7e51734f26e79b713fffbd9a5a451811fd887fa87d43fc4f89522452dab750a68fa0eae845eee67dff677febe8dfd2c78b81881f84126e811a716d686d837db06803f62ed6188589f113501cb0671d6742660e945c9115306ed4172fd631fa958005bb913e59fdc658ae5", 0x93, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9e1795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef359867f4bcef53d3a47853e7af5d0328209ad73224000000000000000000000000000000000000000000850576cab6419dd44c143a56fdce00"/129], 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x22, 0x2, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r6, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r7, r8+10000000}, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 10:26:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="5c02000000000000040101c910f0010000000000000000000000000001000000bb4d9c7655c3fb08961f4b700c0388c19ebf2a60b24f10ff2c205a6a91e03e9e547147ddb422d9522cd652218987d36ef6d38aab8f28a6e1d004c2f6a3640c631da48ba33f7e0b58eabb6c44fbc9e7b835d328a1d248e7fb0f5f518114dd2a5fb8b619"], 0x20) sendmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:26:08 executing program 4: bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="6744669800000000040000905481c07fd55b8c50ba01170003040000209f52afe9e4cfd07b5cf8cd9362139bcddfd20a87b6fb484996000000000000000386052de1fd2543a3b87367de10bc3de31b3a87a5e1c98b3be5d855cd04a27a3476d54c0970021397225e00000000000000005f050000000000000073f8044038b5776789aef960b7bdc9581ede01a4dee7f4ec66200361e624da51315dfbfb0d8c8d4ecd65a1a1b3c8965e0257ac0e96af105eaafdad13e5f579d041f763c7cbe053921ad68143bd9af9e0b2f27bdc7bd9863eb3e1a9c297806196d73975e70c08c83ce5c735929018fedd113e47ad7b8e762d"], 0x1) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198) openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0x387e3fc61e6e15c8) syz_genetlink_get_family_id$tipc2(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000280)) ppoll(&(0x7f0000000700)=[{}, {r6, 0x1141}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x5, 0x0, 0x0, 0x0) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000340)=""/151) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 10:26:08 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) rt_sigsuspend(&(0x7f0000000080)={0x8}, 0x8) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x7cf1f62d, 0x5, &(0x7f0000000280)=[{&(0x7f0000000600)="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", 0x1000, 0x401}, {&(0x7f0000001600)="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", 0x1000, 0x10000}, {&(0x7f00000001c0)="33194f05677a2abfe9385f1857", 0xd, 0x101}, {&(0x7f00000004c0)="70a2adb2b4fd5cda0c181c23089831f7a3ccdc0c839dcf500d42c3db1ce1ebcf9d0e37f68f29c1089c358a47889d1e11840948e2cdb5eeb9b888f97d64593b41db0f7c68d491130345557994f489919c30780fbaa9a192ab292af5f7a573b0e8f6dec98ececf12179a199c4bf354c3f4d2d6c224764235d570aaf768a7f08466b71e61d1578bc3b4cac683", 0x8b, 0x4}, {&(0x7f0000002600)="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", 0x1000, 0x1}], 0x3210240, &(0x7f0000003600)={[{@dmode={'dmode', 0x3d, 0x39}}, {@block={'block'}}, {@norock='norock'}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@dmode={'dmode'}}, {@unhide='unhide'}], [{@permit_directio='permit_directio'}, {@seclabel='seclabel'}, {@uid_eq={'uid', 0x3d, r2}}]}) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r3, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 336.540801] audit: type=1400 audit(1573467968.520:108): avc: denied { map } for pid=13609 comm="syz-executor.2" path=2F6D656D66643A64657620202864656C6574656429 dev="tmpfs" ino=55738 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 10:26:08 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1}}}, 0x5c) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 10:26:08 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r5, r6, 0x0, 0xfffffffffffffff9) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r6, &(0x7f0000000780)='./bus\x00', 0x184) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x2}) getuid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000005c0)) [ 336.597114] audit: type=1804 audit(1573467968.560:109): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir103971659/syzkaller.k5LB9F/344/bus" dev="sda1" ino=17105 res=1 10:26:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00000001c0), 0xfffffffffffffd0d) 10:26:08 executing program 2: inotify_init1(0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0xdd86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="96c6322ea684879088175969ec15e10d40e4719016cbc15a36a88c6c843e12b1f5cb6a73613ceec274", 0x33}], 0x1}}], 0x40001c0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) 10:26:08 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r0) r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="650000007500005a000000e9667d65872e5c70329e077bf6969437a260fe155c0229fc60c36767a84e7fa2e63352556570470d912726cb6f26cccc07133f5076afb74d55da442c23a2bbe6c040c846158e8ff50a608a183aa5cb09e0d6c51f79d1020900c0545174a173846d76a54771bf595a97aedcad09bad0c3d19d67be4a7d88c733c9077f2c78c0fa227a574fbe933cbfc623b735d340c12c0ec61968370793d056de16432d530550b4bcaa18914f74e7ccefffee9922a8d31c9400"/204], 0xcc) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001900)={r3, 0x0, 0x8, 0x10001, 0x4}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x6}) r4 = gettid() ptrace$getsig(0x4202, r4, 0xa2c0, &(0x7f0000000400)) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syz_emit_ethernet(0x12b, &(0x7f0000000780)={@random="42be4ee4bbc2", @local, [], {@mpls_mc={0x8848, {[], @ipv6={0x9, 0x6, "7b02ca", 0xf5, 0xff, 0x3f, @dev={0xfe, 0x80, [], 0x13}, @loopback, {[], @dccp={{0x4e24, 0x4e20, 0x4, 0x1, 0xd2b0, 0x0, 0x0, 0x2, 0x5, "3887a5", 0x5, "9a2e21"}, "84d913e12c046cb01ae95a10b3a53afc560f5881f9f6ce7f75c6a1d5299d3d7c430bf1fb7c270d2771e42d3d24bbd58b92dd13ed7cc256361606735e3e6c5c4646e40de9ab06d214ced55a0fcb320020cf1c3644dc3f9578ca9fce48b0b47eb230a55173323aa9d3701b0d428b2c98a49946189eba44d0c1c22b90d465c0e79ed376ea80169b1bc1be6790805891376606a54560ba72cc6597555e999b15e008e5206c1440e5e3a76d53196b1b451a540d0512dcc2ffd86bec7aa1b6f561172f2e93d5356e5387cd1ce508f8b86f0fadc879c1ff0f5f18c121c620dab72b936332963edbf2"}}}}}}}, 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) fsync(r3) r5 = getpgid(0xffffffffffffffff) get_robust_list(r5, &(0x7f00000006c0)=&(0x7f0000000680)={&(0x7f00000005c0), 0x0, &(0x7f0000000640)={&(0x7f0000000600)}}, &(0x7f0000000740)=0xc) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32], 0x4) ioctl$UI_END_FF_UPLOAD(r6, 0x406055c9, &(0x7f0000000500)={0x3, 0x0, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x0, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x0, 0x0}}, {0x53, 0x100000001, 0x6, {0xa22, 0x1}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x5}}}}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) clock_getres(0x7, &(0x7f0000000380)) r7 = add_key$user(0x0, &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)="d03e559f6cdb5f783badd470585c7f2d19409e20a0d7aacdd66d035cc3994926d1070490ab02ba7d0fca1d5720ad10", 0x2f, 0xfffffffffffffffe) keyctl$reject(0x13, r7, 0x1, 0x201, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'erspan0\x00', 0xfffffffffffffffe}, 0x18) read(0xffffffffffffffff, &(0x7f0000000280)=""/211, 0xd3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 10:26:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) dup2(r1, r0) 10:26:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000240), &(0x7f0000000280)=0x4) 10:26:09 executing program 2: ustat(0x5, &(0x7f0000000140)) 10:26:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x12f9) 10:26:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 10:26:09 executing program 2: socket$inet(0x10, 0x2, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)) capset(&(0x7f0000000000)={0x20071022}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, 0x0, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r4, &(0x7f0000000080)=0x80, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) lseek(r6, 0x100000000000000, 0x2) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) getsockopt$sock_buf(r8, 0x1, 0x10000000000001e, &(0x7f0000000380)=""/87, &(0x7f00000006c0)=0x9) mkdirat(0xffffffffffffffff, 0x0, 0x180) syz_open_procfs(0x0, 0x0) 10:26:09 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000001700)=@l2={0x1f, 0x4, {0xe5, 0x2, 0x4, 0xef, 0x0, 0x9}, 0x36, 0x5}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001780)="ddb1794a9c3bc04e3442e9e0b00e6b40946d1859b382cc26f099ab978f306d5a45cf6f655194f1b723aa22ad20b5c3365968c962c8e848c16dcfb4791cc8e7013e952fea185c5bae1f1eeeebb23e7213f78a46cbb7b778d3c5f49682122bd1006f9a374ae63806af6731d1681418ab99eb71e1b2e1cde6b91538308567edf6fa9bdd39fe04127c6ada32b71f06fd0f7e1fe8761153aa04f114e0072fad26b9", 0x9f}, {&(0x7f0000001840)="7242f57e31187a0ddc1ea80001ebb424acfb2d883a63b031490307447c63f1896b291a042aaffa1d2e8439f48c78b3e25839a7414d6f09092b9b1a899760241062c5c4dbc7722df75ac9b6dcd10d622b97352e5c189a4b21186be4124b0dd42779a92c18c578cbe4b8099c1432ad18f1400b3970c4f813370cae28", 0x7b}, {&(0x7f00000018c0)="941f1869786efbb7904a80d870424ddd97fe612823d8f22b5785414bff2a6e407f4029a585c00e7840017b102694a7ab4bbe29917f9bdf", 0x37}, {&(0x7f0000001940)="7f0341d53ab4c4a30e591bf7ce4bcf2a59ebb82f954f1e11cd7ae2e409e68180e1b255582e16d36312233e523faccc9412eb88a9e016902eed2f6196e54fe6953eb9a9dd3aef041e6be6a5417f8319dbddc4b996e532243467aaa6549d4c33a50efe9c5290bc9e8bd86bf6c209dde0722e94338767974b3e040450335a0d92683026ec423077e9e755476b7f8753b5feef2d68707446b2355483c0b9d70cecdc8c5231243e6116eab45a5bbb37f530a5", 0xb0}], 0x4, &(0x7f0000001a40)=[{0xd4, 0xd09c60bbc498b2a2, 0x9, "22db2db21299b4f1a67d662c33855dc509c6cc40e913128e16a84bc2a39aca184960fbd7dfc79cd3a0c04f80f9b562f28306f9f88fef666486c4db662285b4c7cf5798874bec0288f3a8740f01c3df04f9c9dc5ef0f459a3b0564ccc2fef58919be110648bf58ae6a124f84be254a31ecc661ab804bf5fe73c782bced83db18e7f75dfd241be19461595db255b31c288e599503613b76ca7232468f6246067f92a2f88c9aaabc63a53e18e637b5019bf759b8c2fb4cd9e98bc33d86de2772d89dba0b7cf9637"}, {0x100c, 0x88, 0x80000001, "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"}, {0x4c, 0x106, 0x211c0, "ef0193d49006a0fd1125b32b96d9ed66a64197f7d8325f4e877ec562affa45ca7b8e2e7e7f40843ac191dbb04b7cd30141350e7208375ff4c1e910cec4"}], 0x112c}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000002b80)="e9287eed77b4214463856e82683f333dfc5fcdb5d734adfe7d48f352630474f8c7428cdb5340edf3d6f17cf7cbd90973675208ef77f353597f7ca078893f89891cfee89c02aa3959140b8b947b9b0a2bf610a6787fdc2277a7720c4054d62bd392e930764e78f086ba49f6e639791e889de3b3f359ecc2656d2bc880a1885146d3d41e94c229e9f97a1b7f4936b3d9678b67490b464fbff3e4bc716e67cf12ba286ef99eabba219bd27df3c94f8fb52e4503ca4bff88faa0e9361565427a6e0a3fffe16f87be24f54b437846204aa2dcef2636ab", 0xd4}, {&(0x7f0000002c80)="a87aaa2ab8a5bfe8cd041f264434d9e077d3858546479cd1bbc11292064767ea8cc0ed6d9f629364782624f8543e4079d65e95b9621c09fdce8e39e4b6007a6d2bacbb7c", 0x44}, {&(0x7f0000002d00)="ae460d6efda44c67ce9b7a6136e11822e586319f6c02c15e209e2898177afb298091996a84bc4c61c52350fb94b4311611c11599d563dbd7e75a4fb4ea8ccd64837566e7bdd3d149c6e74b8837a3e0428a05c1aeab498f056114a68a8af2f8d071cf298f7db559fde29533f4fa07a8cbd6d813162784a9708f3e2ef37d44a24d7eee8dcb283f23a59aacf4ff4601", 0x8e}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="c45bb97f5778932da103d347ab5975e3a344c99eee99acdff05cb752245e77cb3253d1f30003efa105272947c36915111f5fa91a89d35232c3d70b639232b9e8da76caecee4ba9513d09d4eba44cc60a95021bf988e9", 0x56}, {&(0x7f0000003e40)="e4c372f1216e5e2f58afef3457209fbc32ab4a43544364c9bfef6a373284ab7c6532ff4e4b1e966977771bc39dbef1dfcb7795518cde2b03471fc0c520b9569e8641348461b40fdd46683f0aa24e4d7a9324ee9fa3d2ab0ca0a3f01f1081a91b2ebae6dc55bb8a94e3f07ab0ff4e260162e94deb2e8fc964234a254ff4ff7545d70172eb12c8ba183ab1595e13337d14d4d47dd272830d18ca61dad8023b90fd936453ae82fa64f58e0b22cfd6ef724d3608afc0", 0xb4}], 0x6}}], 0x2, 0x8000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x200, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffa) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ustat(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000001680)='vcan0\x00') shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(r2, &(0x7f00000001c0), 0xfffffef3) poll(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000580)=""/74) write(r6, &(0x7f00000001c0), 0xffffffffffffff14) read(r5, &(0x7f0000000440)=""/250, 0xffffffffffffffed) read(r6, &(0x7f0000000600)=""/4096, 0x1000) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000000)={0xb53, 0x1b, 0x101}, 0xc) ioctl$KDMKTONE(r5, 0x4b30, 0xfffffffffffffffb) getsockopt$SO_COOKIE(r5, 0x1, 0x39, 0x0, 0x0) getsockopt$inet_buf(r5, 0x0, 0x10003f, 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000200)=r7) getpeername$unix(r1, &(0x7f0000001540)=@abs, &(0x7f00000001c0)=0x6e) write$eventfd(r2, &(0x7f0000000340)=0x2, 0x8) read(r1, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) 10:26:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = inotify_init() r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00007a8000)) r3 = inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x70) inotify_rm_watch(r1, r3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000d19ff4)={0x84000001}) 10:26:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x163) 10:26:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup\x00\x8a@\xd2e\xb4W\xab\x99\xac\xb4\x9a\a\xea\x1c\xc5\xf9\xfd(2+mTS\xbc\xd0F\x88\x10\xd2\x11\xdc\x81q_\xc0Q\x1bE\x970Wv\xbeKN\tV\xb0\x01\x15\x18\x9c\x8b\xea\xe9 \x19\x0e\xfc8M\xb1 \x05\x82\xccW \x06\xe2\x06\xd5\xb3\aTbK\xd9\xa1DY\xbeZ5\x85\x04!\x90_\xfb\xa5\xfaX\xe8R\xe1\r\x1b\xa1\xb6\xd2)\x8bM\xe2\xb6\xac^\xe5\x84\xa9\x8fE{o\xb8\b\xb6\xd7P\xa3\x1a\x01\x8b{\x10J o\xeb\xb2|\x1d\xdb\xf2n@\x83\xeae\xbf\x9b\xcb\xbdj\x02\x8e\xa09\xbfo;\xce\x85\xea%\xe8\x84\xd8\xc6\xdfI\xe6\xa8\xf1\x00\x19kN\xce', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$eventfd(r1, &(0x7f00000001c0), 0xffffff7f) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10d000, 0x0) read$FUSE(r2, &(0x7f0000002200), 0x1000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 10:26:09 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe8b) fcntl$addseals(r2, 0x409, 0x1) write(r1, &(0x7f00000001c0), 0xfffffef3) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x2) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f00000004c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') read(0xffffffffffffffff, &(0x7f0000000600)=""/34, 0x22) fstat(0xffffffffffffffff, &(0x7f0000000680)) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000080)=""/38) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) getsockname$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000540)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$packet(r4, &(0x7f0000000180)=""/88, 0x58, 0x0, &(0x7f0000000940)={0x11, 0x1a, 0x0, 0x1, 0x100, 0x6, @dev={[], 0xc}}, 0x14) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[], 0xfffffe8b) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580), 0xffffffffffffffbd, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[], 0x3}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@local}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xcb) [ 337.582031] SELinux: mls: error reading level categories [ 337.589419] SELinux: failed to load policy 10:26:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, &(0x7f0000001400)=0x67) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001500), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000040)) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001540)=@req={0x20, &(0x7f0000000000)={'bcsf0\x00', @ifru_addrs=@ax25={0x3, @null, 0x8}}}) fcntl$setstatus(r3, 0x4, 0x4c00) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000500)="7334834990be29c5a2dfa6e735de2d06dd626c8e253674382887c7254c49fd7a7f847708696a871cffeced0c2d203eda8646942ebe2bb3537541207bb2bb5beaf51de212a2e0b9215be40a6146b08eef7292438206f32f9192188b97417a5a63723c10992aafe16f689f9cc0291dd67de99386272fe9fd6551ffd9a60a90441ee9bbde1d1e7e4a433e5a98bc03bd7d91a6c904af1d2850770b8cbff3c1a28e90093daf17e82cd3505476c261ec48e5717ed32de99e2c23136136c50412730d1757dc5961506da3db332b21f3e7e9f6fdebdb0a3c0508412a9125e9343492a0d4d6a8b07610dc", &(0x7f0000001640)=""/73) flistxattr(r2, &(0x7f0000000480)=""/115, 0x73) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') pipe(&(0x7f0000000180)) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x3, 0x1100082) r5 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x2000005) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x4, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"}) ioprio_set$uid(0x3, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 10:26:09 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x8000, 0x6, '9P2000'}, 0x13) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) write$capi20(r3, &(0x7f0000000140)={0x10, 0xbca1, 0xf2b12778cf418df6, 0x83, 0x40, 0x1}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) read(r0, &(0x7f00000004c0)=""/249, 0xf9) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000080)={0x9, 0x6, 0x4}) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 337.769148] protocol 88fb is buggy, dev hsr_slave_0 [ 337.774326] protocol 88fb is buggy, dev hsr_slave_1 10:26:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x2400) 10:26:09 executing program 2: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x163942, 0xb6a551c78246b62e) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000500)='cilter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x22}, &(0x7f0000000380)=0x0) timer_gettime(r6, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, r9) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10:26:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}) getpeername(0xffffffffffffff9c, 0x0, &(0x7f0000000680)=0x8c) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9) r2 = syz_open_pts(0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r3, r3, 0x0, 0x2) fstat(r2, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000001680), 0xfffffffffffffe63) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setownex(r5, 0xf, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r6, &(0x7f00000002c0)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x10}}], 0x10}, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x0, r7, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sysinfo(&(0x7f0000008c00)=""/4096) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f00000006c0)=""/175, 0x7ff}) 10:26:10 executing program 2: socket$unix(0x1, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x100000001, 0x6000000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) dup2(r1, r0) 10:26:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000002900)="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", 0xffffffffffffff30}, {&(0x7f0000000340)="84dd14d90496398302bdda8599caffdc51aed16975aece052f", 0xfffffffffffffebd}], 0x1f5, 0x0) fchdir(r0) r3 = socket(0x80000000000010, 0x802, 0x0) write(r3, &(0x7f00000001c0)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008ea0700040001000000", 0x24) creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x1) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) read(r3, &(0x7f0000001840)=""/191, 0xbf) fsync(r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x0, 0x2000000, 0x3, 0x3ffffffffffe}}) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000001900)=""/4096, 0xfffffffffffffe0e}, {&(0x7f00000014c0)=""/207, 0xffffffffffffff7f}, {&(0x7f00000015c0)=""/204, 0xcc}], 0x3) r5 = dup2(r0, r3) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x201403, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000400)={'bcsh0\x00', {0x2, 0x0, @local}}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000140)={'veth0\x00', {0x2, 0x0, @loopback}}) r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000380)="d4", 0xfffffffffffffca5, 0xfffffffffffffffc) r7 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$clear(0x7, r7) keyctl$get_security(0x11, r6, &(0x7f000001c900)=""/102400, 0xc9) unshare(0x18040600) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/create\x00', 0x2, 0x0) 10:26:10 executing program 4: mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffdfff8000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 10:26:10 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000140)='bfs\x00', &(0x7f0000000180)='./file0//ile0\x00', 0x5, 0x7, &(0x7f0000000840)=[{&(0x7f00000004c0)="7841eb620312ede12bc370eda5077ecfd1f4935b9f7a28ddba85d50c174869e51cd9bf649f2c521adb4f03035c9c4873b9a90c7c2073d81475dead6043c49fa23f81e36fbe07e273701b630a1dcf0974833935abadc07f2a0ce0ca328ba536aabcae6c2cf9303ffb7d9b8a9d48fd4e6a3001c97354ecb39a48d5cf6a196837881dd7f2c81192426da434d676fa1ab99aff36c1c30858ce04dc798d27127401a4a003a29e2c65974d65edb1a0f57770b842e42496091b2b735682372a1b14ad0244c54f62ab8ee4525c16ad52759bb03f463c187ac7372291d2e98cdcf4faf5b5b31ea249909fac8120", 0xe9, 0x3}, {&(0x7f0000000280)="85b3b9b23101ad225a74987e48370c735deadcfab57d25a2a9656c05278691f35150b068d9fb38a5438da0b41d930171f227c87bdc808ecfc2ca6fa5bf2e6604cdd013cfbd13", 0x46}, {&(0x7f0000000380)="aeac7ed1de58fbb17e333e89e5cafc02db4571283e5698042dda25cdb78d773f9949cb7db83542dc5b769d6d697dc2d12dfd656c379ab46aea3dfb6c86758bc78f4a16bf5b538bc4b6d658fd9eade740e4c618f48d1405073fdf9dee51e4cacad98e2e5baf9b3453", 0x68, 0x6}, {&(0x7f0000000600)="16bf193214609f5ead9a09f79d228d0461cf5b897161358099ab85e0b1344e8db233b448e738ebfedb8ba6b85d98edb4b7bf48c7e5ed367247ad219c01c65554f312709b964d27f382a65ad1e35cf4b958bdb08a8188ceb2eb8b03882676813608166f186e4b8d53ee7d9b8c4366793843ef09e40d36a01928a29e4a2c51b755a23f917345c389c6504ff04bf2700282d3f58be7ba0e88a411a63555a4757c6f6c151e9632081b340429f3f9f792f617e67b1d31d42b51447930f04a1373be0b47118edc261d335d1f97e04ba985b1e7a8ee07bd", 0xd4, 0xfffffffffffffff7}, {&(0x7f00000001c0)="fec822befe81385692e0cf2b9f3a9483b840634d8a7f66aa87b294f779785b42a70b20ed3e4e13c4d9086f1b5e60fc98d5e460c97ed26d865e0e91df5a2a3594", 0x40, 0x800000000000}, {&(0x7f0000000700)="e91be180544aca9d8615d00ba710f9ca2e6b7fc07d2f58b2a64fb6f60a8aee4605772327aec4133a56f993151339c3b3be41e7930b71d8d365729ba1d5218ba3fa25410d3ab3428a2f394cdbbf", 0x4d}, {&(0x7f0000000780)="49deb8022978892b215fd56dc3abfb8c2b26214bac0a565d34bdd5623548700bbb53871efac958a94599eb1036c66b1bced4ecac88e3ca00fb91e78641d6ad8f60ff1e18870a37cbce99ad2789eabdbd90fe3006c07d39385657029ec12de26150f169b317ec75be1a8c871f4b061913d69a1d748a6caaff0935ebdb80aad2781d68833d6529d0f18ee8de4b9924539e28fa3583", 0x94, 0x10001}], 0x10, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xff, 0x400000) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x89e3b2b183ea3cd3, 0x2010, r3, 0x7fff) 10:26:10 executing program 4: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0xffffffffffffffff]) setresgid(0x0, r0, 0x0) [ 338.522866] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 10:26:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff01) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1be6c3ea78c4cdc3) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7fdd7b8ba2960f2194765aca0000804876525dc45a330d4bd6a859704a3b864122281e2accb897c96f7f8db93debd49b334e9ba8e9e96e8951b847017e329a0401e5e3547450efc1a9ab"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 10:26:10 executing program 0: pipe(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x4) creat(&(0x7f0000000480)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffffffffffffc) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001500), 0x4) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) prctl$PR_CAPBSET_READ(0x17, 0x2000d) r2 = socket$key(0xf, 0x3, 0x2) tee(r2, 0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) stat(&(0x7f0000001840)='./file0\x00', &(0x7f0000000080)) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x15acc76c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x40000008}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x1) 10:26:10 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) open(&(0x7f0000000080)='./file0//ile0/file0\x00', 0x400000, 0x36) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:10 executing program 4: syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) getsockopt(0xffffffffffffffff, 0x5d, 0xed, &(0x7f0000000400)=""/4096, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) fcntl$setlease(r5, 0x400, 0x0) pwritev(r5, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x8) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) socket(0x4000e, 0x8000000000004, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'veth0_to_team\x00', 0x100004}, 0x365) socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x2, @rand_addr="5509878c5b727d58925278560e68332a", 0x81}, 0xffffffffffffff17) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 338.969178] protocol 88fb is buggy, dev hsr_slave_0 [ 338.974314] protocol 88fb is buggy, dev hsr_slave_1 [ 339.043307] audit: type=1804 audit(1573467971.020:110): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir103971659/syzkaller.k5LB9F/348/bus" dev="sda1" ino=17255 res=1 10:26:11 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c401}, 0x402) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 339.219117] protocol 88fb is buggy, dev hsr_slave_0 [ 339.224290] protocol 88fb is buggy, dev hsr_slave_1 [ 339.289123] protocol 88fb is buggy, dev hsr_slave_0 [ 339.294281] protocol 88fb is buggy, dev hsr_slave_1 [ 339.374117] audit: type=1804 audit(1573467971.350:111): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir103971659/syzkaller.k5LB9F/348/bus" dev="sda1" ino=17255 res=1 10:26:11 executing program 3: socket$packet(0x11, 0x20000003, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$KDENABIO(r1, 0x4b36) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x103) getrandom(&(0x7f0000000000)=""/6, 0x6, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x502, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000ffffffff) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000140)=0x8) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4004700c, 0x3d) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) dup3(r8, 0xffffffffffffffff, 0x0) 10:26:11 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="e219a4f99a7553fbffffff011718da18cc6efcbf45718d", 0xfffffffffffffe7a) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000bc0)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @netrom, @default, @netrom, @rose, @rose, @rose]}, 0x80, 0x0}, 0x5}, {{&(0x7f0000000e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, 0x0) read(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001e40)) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r2, r2, &(0x7f0000000180)=0x74000000, 0x5) 10:26:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x10000000000001, 0xfffffffffffffe79) close(r0) 10:26:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x0) 10:26:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) listen(r0, 0x0) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000280), 0x0, 0x0) 10:26:11 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000080)={0xfffffff9, 0x10000}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r0, &(0x7f0000000180), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 10:26:12 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f0800000000009727c1c6fe76cef3e26def23000200000811000013", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0x1000) 10:26:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000300)=0x2, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x9, &(0x7f0000003e00)=[{0x1800000000000000, 0x9, 0x4, 0x40}, {0x5, 0x10001, 0x5, 0x7}, {0x0, 0x36c, 0x1, 0x3f3c}, {0x0, 0x7, 0x2, 0x9}, {0x7, 0x1, 0x1, 0xfff}, {0x665b8a6a, 0x1, 0x41b, 0xffff}, {0x40, 0x81, 0x100000001}, {0x80000000, 0xee6, 0x6, 0x6}, {0x6, 0x8001, 0x100, 0x5eb}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xd) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) setsockopt$inet_tcp_buf(r0, 0x6, 0x1e, &(0x7f0000003cc0)="870e9d0a552a6e7378b4be6972edd4f4ba90b3f69ddff8848209f1d7a7336fd09ba572eefd5ca34f69ae341f74f8da0c936648b5b2f3b10547fa86c56478cd494ffab4e91d8ca324b80fc4da0a75bc17124f7f783506e38d29931f9e48d925cf5d3e0fb7d4d79edc53df2b262b811062463a83437929b6ed593a8bc327bc9d36434b16c1ca4e54a4ba39646307476c5d8d73f751d39ee10049c9fec9cbe0b04ab390beba265254e240c0f1b6de57a988ef329e9620f2c0464e30f8955df04de51cd27dd3093a27dce952bc04459e47aa", 0xd0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000003bc0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendfile(r3, r4, 0x0, 0x880003) 10:26:12 executing program 3: open(&(0x7f0000000380)='./file0\x00', 0x28a041, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r1, &(0x7f00000001c0), 0xbab230cf) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000004c0)="90c38a20d66d02b572fadbea61581770", 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x200d00, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0xfffffffffffffcfa) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) syncfs(r0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$getflags(r4, 0x401) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffd4b) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000100)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000040), 0x4) 10:26:12 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:12 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe8b) fcntl$addseals(r2, 0x409, 0x1) write(r1, &(0x7f00000001c0), 0xfffffef3) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x2) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f00000004c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') read(0xffffffffffffffff, &(0x7f0000000600)=""/34, 0x22) fstat(0xffffffffffffffff, &(0x7f0000000680)) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000080)=""/38) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e21, 0x800, @loopback, 0x9}, 0x1c) getsockname$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000540)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$packet(r4, &(0x7f0000000180)=""/88, 0x58, 0x0, &(0x7f0000000940)={0x11, 0x1a, 0x0, 0x1, 0x100, 0x6, @dev={[], 0xc}}, 0x14) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[], 0xfffffe8b) pipe(&(0x7f0000000340)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, &(0x7f0000000000)) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSSERIAL(r9, 0x541f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r9) fcntl$getownex(r9, 0x10, &(0x7f0000000700)={0x0, 0x0}) fcntl$setownex(r8, 0xf, &(0x7f0000000740)={0x2, r10}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, 0x0, &(0x7f0000000000)) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSSERIAL(r12, 0x541f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r12) fcntl$getownex(r12, 0x10, &(0x7f0000000700)={0x0, 0x0}) fcntl$setownex(r11, 0xf, &(0x7f0000000740)={0x2, r13}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYPTR=&(0x7f0000000780)=ANY=[@ANYRESOCT=r1, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC=r7, @ANYRESDEC, @ANYRESDEC], @ANYRES32=r10, @ANYRES64, @ANYBLOB="4c1ab286ab111abca4dd50940f64a89534574b169f1c692ef7f24a436c9a9d459eeb09abe809524a35b9aafb4c74fcc8ff78984b35d5fdc2a64984dba5a3efa8c43a9acd7efbf71fbe75d03c65459ff9e00e5813085e8d050b1729f380b2e2d1659b1dc10a755437e196f55ce304f8fda0580ba203e81a3433bf03f7a9de0b95aa62c02ad84b5857cbf652867b36d10d0043b32fddfca19690df138e290728a3a10e743cc081650259409fedffa66318897371f488fed473321a39ebc2ff5025d9459d876620b5109e84b88042ece9", @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="fdabe3ced477d32d6ac3b3f9dc5960d71a60bb849693b87382566cb086bccc9a3b624e540ef49bc2b2a6980dbc016d3a9c105d33ad494ecc77ad1dda36436f3bc3b985d0f2f463292260e1660d3c3fc94131d4cc333b8edae4075367809a36c0d3f3ad512447204622022c37a471aaffb47f1790caaae66a051bbd673941428afdf868f69e5632e8b8225761d40bb5be54f1531d1707449b24aa79d0c92368c0f2df5b4d1afa4bc44421fa2039d3867f55b5ee6c68e4b0d98d9eb90e41f048e7dbf570b38a1b2320d32d7e0e1f4862cfb83e6d8e0696217eb78723a391fb6078a4bc41bb169d1556b3dd56", @ANYRES32=r13], 0x8}}, 0x50) r14 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r14, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r14, r14, &(0x7f00000001c0), 0xa198) getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@local}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) 10:26:12 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000058001f00ff03f4f9002304000a04f511080001000201000208da770c9878cce3", 0x104) [ 340.295069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 10:26:12 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)=@ethtool_modinfo={0x42, 0x0, 0x0, "6171d62da4a3241c"}}) 10:26:12 executing program 4: write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000040)={0x43, 0x9, 0x1}, 0x43) io_setup(0x7, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000004003}) io_submit(r0, 0xa, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 10:26:12 executing program 0: clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) clock_adjtime(0x0, &(0x7f0000000240)={0x8001}) 10:26:12 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x4000, 0xa8) 10:26:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0xffffffffffff7fff, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000580)=""/248) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000004, &(0x7f0000000100)=0xfc000000, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x67}, 0xfffffffffffffd23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x200000000000002a, &(0x7f0000000180)}, 0x100000018) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x2000000020000) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in6=@loopback}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) r4 = open(&(0x7f0000000380)='./bus\x00', 0x141045, 0x192) close(r4) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000000080)=',!\x00', 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) write$cgroup_subtree(r4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xe4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read(r6, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r4, 0x4, 0x2000) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000000c0)}, 0x40000000) sendfile(r5, r6, 0x0, 0x80003) 10:26:12 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000980)='setgroups\x00') exit(0x0) close(r1) 10:26:12 executing program 0: r0 = memfd_create(&(0x7f00000012c0)='}\xbf*x\x89-vO\xd3\x01Uk2Qo\xb5\x91\xd0\xd0\xb8Vb\xe8*l\xdcC\xeb\xa6\xe4\x12$\xd1\xa3zz\x85\xf4\x1e\xcc\xfc\xf6\xb6__\xec\xef\x1b\x9d\x0ePw\x1bN[\x81\x92\x15P\xc51\x9eR\bjh\xce\xa9j\xda\xf8B\x84\x8d\x12.\xcb\x95\x9a\n\xb24\xd0\xd1\x87N\xc5Os\"\x1a\x9fY4\x8d\'f\x88\xf4\xfd\x95O\x99\xb9\xfc\f\xfa~$1\xbe\v\xd5aI*Y\xb0W*-W\v\x00\x00\xf9\x02Q\x10\xc9Uv\x9f;f\x0f\xa2\xfa\x84\xe1i\x19\xc3/\x10&\x94\x9b\xe5\x83\xa9\x93E\x9b\xdas\xbc\v\xbd\xaf\xe3\x17\x82[g.\xe3\xc9\xf5iX5\xf8\x02h\xb8:l&\xd0]\x7f5<8{\xc8jh\xa4\xf1\nS\x17\xf8v', 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') readv(r1, &(0x7f00000021c0)=[{&(0x7f0000000140)=""/79, 0x90d}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2) 10:26:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:restorecond_var_run_t:s0\x00', 0x2b, 0x1) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x216) write(r2, &(0x7f0000000380), 0xfffffffe) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0x5, 0x6}) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f00000000c0)=0x3) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 340.867496] audit: type=1400 audit(1573467972.840:112): avc: denied { relabelto } for pid=13894 comm="syz-executor.2" name="TCPv6" dev="sockfs" ino=56158 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:restorecond_var_run_t:s0 tclass=tcp_socket permissive=1 [ 341.044775] audit: type=1400 audit(1573467973.020:113): avc: denied { write } for pid=13894 comm="syz-executor.2" laddr=::1 lport=20002 faddr=::1 fport=37838 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=sock_file permissive=1 10:26:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r1 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x2) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000780)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) times(&(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000180)=@sha1={0x1, "c3c3bd757dbab8c09525aa0573ab09c293523bdc"}, 0x15, 0x1) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @multicast2}, 0x90, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)='veth0\x00', 0x800000000000, 0x200, 0x8000}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000500)=0x0) listen(r3, 0x3) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x1d}, @in6=@mcast1, 0x4e24, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0xa0, 0x3f, 0x0, r6}, {0x7, 0x6, 0x918, 0x1ff, 0x7ff, 0x1f, 0xffff, 0x8}, {0x6, 0x10000000adef, 0x6}, 0x8, 0x0, 0x2, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3501, 0x1, 0x3, 0x9, 0x3, 0xfffffffe, 0x85}}, 0xe8) 10:26:13 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x420, 0x250, 0x0, 0x130, 0x250, 0x130, 0x350, 0x350, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000140), {[{{@ipv6={@loopback, @ipv4={[], [], @broadcast}, [0xffffff00, 0x7bb12407d2f94707, 0x0, 0xff], [0xffffff00, 0xff000000, 0x80ffffff], 'gre0\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0xe, 0x21}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x111b8645e22668dd, 0x60}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "851d224c5dd0c30968aa2b1aeee25b62dec3ec3f97391c283089b273123f"}}, {{@ipv6={@mcast1, @ipv4={[], [], @loopback}, [0xff000000, 0x953146dd940b2ae6, 0xffffff00, 0xffffff00], [0x0, 0xffffff00, 0x0, 0xffffff00], 'vcan0\x00', 'team_slave_1\x00', {}, {0x7f}, 0x12, 0x80, 0x5, 0x11}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0xffff, 0x0, 0x40, 0x4, 0x2}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3f}}}, {{@uncond, 0x0, 0xc8, 0x100}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x40, 0x5}, {0x3, 0x3, 0x4}, {0x6c8, 0x40, 0x2}, 0x8001, 0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) chroot(&(0x7f0000000180)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:13 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f000000efcc)={{0x1}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008084, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/netfilter\x00') fcntl$getown(r2, 0x9) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4) read(r1, &(0x7f0000000a80)=""/250, 0xfffffffffffffd2e) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000000c0)={'yam0\x00', {0x2, 0x4e20, @multicast2}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getpid() syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001c2e5a3b889b85dd730fce5d", @ANYRES16=0x0, @ANYBLOB="1008000000000000002508000000"], 0x9}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x3) syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe8) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a40)) getpeername$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000008c0)=0xe8) getpeername$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000940)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000980)={@initdev}, &(0x7f00000009c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d00)={{{@in6=@empty, @in6=@ipv4={[], [], @multicast1}}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000e00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000f80)={'team0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000)={{{@in=@broadcast, @in6=@empty}}, {{}, 0x0, @in6=@ipv4}}, &(0x7f0000001100)=0xfffffffffffffebb) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001180)={{{@in=@local, @in6=@mcast2}}, {{@in6=@loopback}}}, &(0x7f0000001280)=0xd26976af) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, &(0x7f0000001300)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001400)={{{@in=@local, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000001500)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4000010) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000340)={0x800, {{0x2, 0x4e22, @empty}}}, 0x84) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) 10:26:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x2, 0x4) 10:26:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000e9d7752aaa04ae053f3e191870c0b0e7f3cb29f7b314fea173ed4527b6c36565cd6a9e81b822fe9a06e193723d30a90e02eab306d007dc2b5f376463bd4e76a6e3504035366d4f738125c9a36aa60311638327ef3638"], 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendto(r0, &(0x7f0000000040), 0x6f29, 0x0, 0x0, 0x8b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @initdev}}}, 0x104) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x208842, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000480)={0x1, {{0xa, 0x4e21, 0x5, @loopback, 0x8}}}, 0x84) fcntl$setstatus(r2, 0x4, 0x2c45) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000180)=0x7, 0x4) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000000)={0x8, 0x331f, 0x1, 0x5, 0xd, 0x40, 0x1, 0xe1, 0x3ff, 0x81}) 10:26:13 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0xd, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 10:26:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:restorecond_var_run_t:s0\x00', 0x2b, 0x1) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x216) write(r2, &(0x7f0000000380), 0xfffffffe) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0x5, 0x6}) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f00000000c0)=0x3) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 10:26:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 10:26:13 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000fe0ff4)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 341.892986] 9pnet: Insufficient options for proto=fd [ 341.926764] 9pnet: Insufficient options for proto=fd 10:26:14 executing program 5: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1d7, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty, 0x33}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32], 0x4) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf2, 0x2a}, {}, @period={0x0, 0x0, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5}, 0x2, &(0x7f0000000480)=[0x5, 0x85e]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x0, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) memfd_create(&(0x7f0000000340)='\x00', 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)) r4 = getpid() r5 = syz_open_procfs(r4, &(0x7f00000006c0)='net/ip6_tables_targets\x00') pipe(&(0x7f0000000400)) socket$inet6(0x10, 0x480000000801, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d400"/85, 0x55}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d400"/85, 0x55}], 0x1}, 0x0) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x8) write$FUSE_LSEEK(r6, &(0x7f00000001c0)={0x18, 0x5fe4b0799f3374ad, 0x6, {0x1}}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}, 0x1c) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) 10:26:14 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) getsockname$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000007c0)=0x1c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f0000000140)='./file0//ile0\x00', 0xff, 0x4, &(0x7f0000000380)=[{&(0x7f0000000180)="1a1091bfa5ce7bd59b3408ed7a26f0477858b9d5df8114afd7c3389eae4bdd4a4b0da6519689c04bd49b82905a209476e61c050e24d7a10c79846c37d94630013014624e126c9fa0d2271fcccf3c8cea041624c528316ef355", 0x59, 0x9}, {&(0x7f0000000280), 0x0, 0x2}, {&(0x7f00000004c0)="4af70bc488c642928993f05ed60e8663974139018a6a6e0990414bfe06a7a8d3790d8c923de7b12e2fcab69be354dbaf380779cf24ec6107e27a91b607295fe80428fbbe958338f16aefebd120cab17abe3efbc46d7d673876b3be6c2840d016060c55f37ae5a12dc97a22762e01bc4f9ea6febd47fde1b9de892f14309bc008eb70", 0x82, 0x6fd}, {&(0x7f0000000600)="c80d9b80a515cd6d9dea05841861d7d89d52cc387cecf76255680620c2b8aa6cf1477e8701498a7af30f794fb1e40479a5086b36ab39b51552f94f84c7f66392c473e2e6900edd032dbb740e76d249fac8fb636edb29a1b4f6e94d586f21812ed0bffbd3cad5b30d9fe66d0b1fc7d9acc464f406385c776e716a8885eeb65e2c7f1ea7ebd5f8f50a58c67ee66cb744b2c68e9ab9d0b7c2aa81", 0x99, 0x4}], 0x0, &(0x7f00000002c0)='9P2000.L') write$P9_RVERSION(r3, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0, 0xfffffffffffffff5, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}}, 0xa0) write$FUSE_BMAP(r4, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r5, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r7, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r8, r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x2028010, &(0x7f0000000800)=ANY=[@ANYPTR, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="051901008100"], &(0x7f00000006c0)=0xa) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000700)={r10, 0x0, 0x548, 0x2, 0x200, 0x6}, &(0x7f0000000740)=0x14) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:14 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:26:14 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0000000000000200323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xffffffffffffff3e}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:14 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x2, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e999) write$evdev(r0, 0x0, 0x0) 10:26:14 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm], 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f00000006c0)="bb120a7889345606d132dd8b80966668658b89fc789da6efcb35f7645b2382f095cc6de23040b0d6e7e51734f26e79b713fffbd9a5a451811fd887fa87d43fc4f89522452dab750a68fa0eae845eee67dff677febe8dfd2c78b81881f84126e811a716d686d837db06803f62ed6188589f113501cb0671d6742660e945c9115306ed4172fd631fa958005bb913e59fdc658ae5", 0x93, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9e1795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef359867f4cd5753d3a47853e7af5d0328209ad7322400000000000000000000000000000000000000000085055a247354d5eefb47d476cab6419dd44c143a56fdce00"/138], 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x22, 0x2, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r6, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000440)) nanosleep(&(0x7f0000000100), &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 10:26:14 executing program 4: syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0) [ 342.408597] ptrace attach of "/root/syz-executor.4"[13964] was attempted by "/root/syz-executor.4"[13969] 10:26:14 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x4d040, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mkdir(&(0x7f0000000080)='./file0//ile0\x00', 0x180) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 342.487978] audit: type=1804 audit(1573467974.460:114): pid=13971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir103971659/syzkaller.k5LB9F/353/bus" dev="sda1" ino=16993 res=1 10:26:14 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read$FUSE(0xffffffffffffffff, &(0x7f0000000840), 0xfee1) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = socket$netlink(0x10, 0x3, 0x28d7b4a841aa4290) fgetxattr(r4, 0x0, &(0x7f0000000300)=""/125, 0x7d) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10001000a00) chroot(0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0xf05}, 0x1006) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) signalfd(r8, &(0x7f0000000080)={0x3ff}, 0x2) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) lseek(r6, 0x0, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f00000007c0)) 10:26:14 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000004c0)=@v2={0x3, 0x3, 0xa, 0x3ff, 0x94, "b332d3d1cedce5f2589806cce0b2c372b218b49d9eef1bc3a3c1d55b791b9fe2c03e305d4c13b22b3a76a5dfdca7570cca9a1a19729a3c6337c0cbfcdfffcf96bb6ea3125276045c76b3000cfc7e3c536ba17e3a358c252d22a3278d9423b34e53e1f17e0cf31994a8e4989fe897928832566f3d4077e04f1470be380dcc766d4374bf36ba8482bb2d07123991b983b8a6dc04d3"}, 0x9e, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:14 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000002c0)) 10:26:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df704011100fe8000000000f8ff0000000000000000fe8000000000000000000000000000aa00004e2004019078000087ae0005ff002b00b32def4f115cb6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794ce0d8030ba9534d8aaabc571e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237e00b14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232076a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64eca7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6a4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4f07d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b500d98114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb44a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5a469a2cf6cc6d1718a5d8958e0844bcf1eb4ca04fa7c4ef4d2a194b0856e0077baa1adb9c9dab6cd55a1e6ff67f8a02bea505add6e8820c158477eb019e5e037f43152c72927aad087f5b67616e0d51e9e7e82d5d6f0bc801b9ff693f0dc8014132dc250749dc95305a29b702edaec9fde87783ff1cdb342f94d9299c0d000063e1b86bd6348f3e6834822da764c049a57f22631809593ae57f69c8694c10c8f113c79db5440692d35062236ba9174bffc0ceb971c69edece8461c8289c245f05a83b88106f70aadf5a378f19f8db8d956b94932d7bc2c8a9a3f9a253298a29daf9ac65461cc21035ccd72140ce2237fdcad0f3a1659a40ccd05eee23d0b7bc25b577021ef286ed942c8a07fe51b0892623982d01ca164ffea54f22ed67b34cc2fdf8787d165fc5dc76fbbd4a726587eb9764ba09b4b9176d65206f56964c7f60d9ce01afe02b08130eb8e36c39e89517951c45e072716545a2e6bed5e6005bb36264eb8493d592c076a2c1845fe075550527596e65ceace382bbe53b2c4f0d3196876e5454d2b8aaa91c278094334d385e1d6119c46771c3742d364efbb937072a3198ab765a91bf764c679d6f2ae8b4f2d8cfe4f6713074c7cda10c67edb73b83637be74f4c9f08fbecb0c8d914e49cbc8670aee9326d341237a758f855ca655e39b5be661eebcab2e1e0045c30211fd0109317a7992b1f47dc339669bcb907c7c4d6e5edad51cbd81f37881e55e9c46730734552a50aacdeddc4c766a1ce03de72b5117dc2985e19de1196658ec770bfe37b99e1666d97ca50f14ca3889555926d555a1f"], 0x0) recvmmsg(r0, &(0x7f0000009500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}}], 0x40000000000014a, 0x0, 0x0) shutdown(r0, 0x0) 10:26:14 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000440)="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", 0x28d) 10:26:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000001c0)=0x101, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x10) 10:26:14 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x81, 0x4) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) write$P9_RLERROR(r0, &(0x7f00000000c0)={0x22, 0x7, 0x2, {0x19, 'trusted.overlay.redirect\x00'}}, 0x22) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000001500), 0x4) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0), 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) prctl$PR_CAPBSET_READ(0x17, 0x2000d) tee(0xffffffffffffffff, r1, 0x8, 0x4) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getresuid(&(0x7f0000001480), 0x0, &(0x7f00000017c0)) stat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)) write$eventfd(r1, &(0x7f00000001c0), 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x40000008}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(r3, &(0x7f0000001600)=ANY=[@ANYBLOB="100009000000fa00005985ba5b73fdd66e1d7c6cce329d7274c8d5e2b5fa43ded232c1b41c55b35dc86eeface0b7235cb27b27a336266ed2b979e3ed52eea39af20524410ab293b22802c05f94cc2c0886c2ab084a8949aaf63078d572007630b90a6c040ac367f01e44ef7af5e9ed2c35d5201cf2264aee0b10713f7c647168e99ae0009c377af32157e67bbb3e5f05c083524e139603f78d484e384229cc27fbfefe0cc367155cf39420cd"], 0x10) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x1) accept4$inet(r0, 0x0, &(0x7f0000000080), 0x0) connect$inet(r5, &(0x7f0000001900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 10:26:14 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r1 = creat(0x0, 0x0) mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}], 0x2, 0x100000) setsockopt$rose(r1, 0x104, 0xf8769830c576c9a9, &(0x7f0000000100)=0x3, 0x4) r3 = geteuid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r4, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x210000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766df215bc2e95b00000000000000", @ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR64, @ANYRESHEX=r4, @ANYRESOCT, @ANYRESDEC=r5], @ANYRESOCT=r0, @ANYBLOB="e5782a020ea23a1cf13147e9a1d90f1fa312eebe80218f71844bf7db304c10a57b75eaa212202fbdaa943e1839d4ea7e30037ffec34757fa11050c3243f410ae02394ef770d62929e21c4fbad2360a9fb17e54b6b2b32c9f37", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRESOCT]], @ANYRESHEX, @ANYBLOB=',version=9p2000.L,mask=MAY_APPEND,uid>', @ANYRESDEC, @ANYBLOB=',euid>', @ANYRESDEC=r3, @ANYBLOB=',\x00']) mount$9p_tcp(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='1q\x00', 0x80000, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532302c70726976705572742c76657273690400000000000000302e752c63616368653d667363616368652c76657273696f8b3d397e323025322e752c64656275673d307830303030f031303030303030303030322c7569643cf59a57848006a4a52594a98fab6acd232c7d9d0191d5bc174d52a56434", @ANYRESDEC=r3, @ANYBLOB=',smackfsroot=,\x00']) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r8, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0xc0000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdn\x00\x00', @ANYRESHEX]) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000080)=0x101) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:15 executing program 0: r0 = gettid() r1 = inotify_init1(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) close(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) tkill(r0, 0x1000000000016) [ 343.011284] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 343.035120] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 343.049213] 9pnet: Insufficient options for proto=fd 10:26:15 executing program 4: getgroups(0x2, &(0x7f0000000100)=[0x0, 0xee01]) setregid(0x0, r0) [ 343.066512] 9pnet: Insufficient options for proto=fd 10:26:15 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x1ca) sendfile(r2, r3, 0x0, 0x7fffffa7) write$P9_RVERSION(r1, &(0x7f0000000340)={0x6c, 0x65, 0xffff, 0x8001, 0xffffffffffffff1a, '9P2000.u'}, 0xffffffffffffff17) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r4, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:15 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x20000802, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x7, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x112) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f000095bffc)={0x4, 0x0, 0xfffffffffffffffc}, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 343.379183] protocol 88fb is buggy, dev hsr_slave_0 [ 343.384268] protocol 88fb is buggy, dev hsr_slave_1 [ 343.449189] protocol 88fb is buggy, dev hsr_slave_0 [ 343.454327] protocol 88fb is buggy, dev hsr_slave_1 10:26:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(r5, &(0x7f00000004c0)={0x18, 0x7, 0x2, {{0xb, 'cpusetwlan0'}, 0x5}}, 0x18) sendfile(r5, r5, 0x0, 0xffffffff80000001) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e4a75", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af05742"}}, &(0x7f00000003c0)=0x0) timer_gettime(r7, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r2, r6, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) gettid() ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000940)) 10:26:15 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe) r2 = getpgrp(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) ptrace$setregset(0x4205, r2, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x7a7}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) getsockopt(r3, 0x3, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) sendto$inet6(r4, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) creat(&(0x7f0000000180)='./file0/bus\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000380)={0x0, 0x3, 0x0, 0xffffffffffff0000}) ftruncate(0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x100000000000002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000000c0), 0x182, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r6, 0x541c, &(0x7f0000000240)) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000580)={0x0, 0x1, 0x6, @local}, 0x10) 10:26:15 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xbf63cc802f242e5b, 0x74) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000280)={0x5, 0x1}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x102000, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) mknod(&(0x7f0000000080)='./file0//ile0\x00', 0xe022, 0xffff) 10:26:15 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) readv(r1, &(0x7f0000000580), 0x3c1) [ 343.573695] SELinux: unknown common 10:26:15 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) readv(r1, &(0x7f0000000580), 0x3c1) 10:26:15 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x801004, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}], [{@dont_measure='dont_measure'}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000800)) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x6e}, 0x18) r3 = socket$inet6(0xa, 0xa, 0x6) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) getsockopt$sock_int(r4, 0x1, 0x6b01c91d13a45af5, &(0x7f0000000080), &(0x7f0000000140)=0x4) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) ioctl$VIDIOC_SUBDEV_G_EDID(r5, 0xc0285628, &(0x7f0000000540)={0x0, 0x0, 0xffffffff, [], &(0x7f00000004c0)=0x2}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000000600)="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", 0x1ca) sendfile(r7, r8, 0x0, 0x7fffffa7) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x8000, &(0x7f0000000700)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3dfb0c2bbb52c5895712901564db7f79201fe649974807a56a909a6771e3610713531cba9f554b0c78341857585c7ece9dfd86217c34aa8b53ffcb8f9e9618a2050271c01612028d6fab40e03089ff94139dd2f5d7300800000000000000bbf4f993bcec34f07e285ce474b7dd6f0165320d3f1106000000000000000f8f31424b2e0abc19f5af8079a117e750a1d340fc36f984da4426d8d76020009e7d0b63b367c9834b5c8bf2c6b947a6dc902513cef520af7328bacd8e0eba0a419ca50b3b144d3c8e9fef25350000", @ANYRES16=r6]) setxattr$security_smack_transmute(&(0x7f0000000180)='./file0//ile0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='\vfm2', 0x4, 0x2) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 343.595459] Unknown ioctl 1074310771 [ 343.606697] SELinux: failed to load policy [ 343.616288] SELinux: unknown common [ 343.620921] SELinux: failed to load policy [ 343.687502] SELinux: unknown common [ 343.696893] SELinux: failed to load policy 10:26:15 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000001c80)='./file0\x00', 0x113d, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = gettid() r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$apparmor_exec(r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') r4 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000180)="e6", 0x1}], 0x1) getdents(r3, &(0x7f0000000040)=""/46, 0x2e) 10:26:15 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) readv(r1, &(0x7f0000000580), 0x3c1) 10:26:15 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae6", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) write$capi20(r3, &(0x7f0000000080)={0x10, 0x4, 0x5, 0x80, 0x2, 0x7ff}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x4000000000, 0xfffffffffffffffd}}}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 343.860561] SELinux: unknown common [ 343.864648] SELinux: failed to load policy 10:26:15 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) readv(r1, &(0x7f0000000580), 0x3c1) 10:26:15 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000240)='./bus\x00', 0x7) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(r3) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @initdev}, &(0x7f00000002c0)=0x40) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000400)) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x74) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000040)=0xfffffffffffffdff) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000300)={0x2, 0x1, 0x7214176}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000001080)=0x1e) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000440)="c42ac337e1efee9fce9c8372f48b5ccb5307") close(0xffffffffffffffff) open(&(0x7f0000000380)='./bus\x00', 0x101000, 0x1c0) [ 344.009150] protocol 88fb is buggy, dev hsr_slave_0 [ 344.015138] protocol 88fb is buggy, dev hsr_slave_1 [ 344.069816] SELinux: unknown common 10:26:16 executing program 2: pipe(&(0x7f0000000100)) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000009580)=[{{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000040)="86", 0x1}], 0x1}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) 10:26:16 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f00000004c0)=""/252, 0xfc}], 0x4) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 344.102140] SELinux: failed to load policy 10:26:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) execve(0x0, &(0x7f0000000380)=[&(0x7f0000000200)='/selinux/checkreqprot\x00'], 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x2000000000000036) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) 10:26:16 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x1d) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000033) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 10:26:16 executing program 3: open(0x0, 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x208204) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0x40000000000004}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000380)={'bridge_slave_0\x00', {0x2, 0x0, @remote}}) connect$inet6(r2, 0x0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) 10:26:16 executing program 4: mknod$loop(&(0x7f0000000280)='./file1\x00', 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x81080, 0x0) quotactl(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) 10:26:16 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae6", 0x1ca) sendfile(r0, r1, 0x0, 0x7fffffa7) sendto$llc(r0, &(0x7f00000001c0)="0bdec1d06eb757a4ad11f39b75a8bc6ede03fc017714", 0x16, 0x80, &(0x7f0000000280)={0x1a, 0x6, 0x20, 0x53, 0xba, 0x8, @broadcast}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb3dd83a221b8efc) r4 = dup(r3) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r4, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x1ca) sendfile(r5, r6, 0x0, 0x7fffffa7) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x2d8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x76c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff9d5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xdfa, @remote, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfff, @empty, 0xef4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xadfe, @rand_addr="650c0b3bb38106493fd6c694d16f838d", 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0bbc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x10}, 0x20) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x129102, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3, 0x1000}, 0x4) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="daf2267d65b2c5bdc56a57d31f98d957bf99c390a7512d5e586c800a7e677fc650e2176a82a8efeacc66a4eb027e504b6d472ede4404de9a4b27268540154c25e2ba1aa2b66940e738c11e7653499ed205112acd131d4a579b1cb6dd2514c084e940438b68ff67aa1351e6be134d585da0b41607d864a83d8589888c13415092f8d3d8e6f62debf6d01b2b71962d2db0ac27832486514f35e157f91b473addf88538bed07976dbf33e6eae79d3075e7f", 0xb0}], 0x1) 10:26:16 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0xffffffffffffff8f) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000500), 0x3528acda}], 0x20000000000002d7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/102, 0x66) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$packet(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') pwritev(r3, &(0x7f0000001400), 0x31f, 0x0) [ 344.569484] SELinux: unknown common [ 344.573571] SELinux: failed to load policy [ 344.586379] ptrace attach of "/root/syz-executor.2"[14116] was attempted by "/root/syz-executor.2"[14117] 10:26:16 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) r1 = dup(r0) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 10:26:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000140)) 10:26:16 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 344.751880] audit: type=1800 audit(1573467976.730:115): pid=14135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17262 res=0 10:26:16 executing program 4: clone(0x40000000200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000300)={&(0x7f0000000cc0)="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", 0x270}) [ 344.840232] SELinux: unknown common 10:26:16 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') [ 344.867817] audit: type=1804 audit(1573467976.770:116): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir710818192/syzkaller.zCDYJR/363/file0" dev="sda1" ino=17262 res=1 [ 344.899760] SELinux: failed to load policy 10:26:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000faffff"], 0x0, 0x0, 0x0}) [ 344.949238] ptrace attach of "/root/syz-executor.3"[7598] was attempted by "/root/syz-executor.3"[14150] [ 344.978553] audit: type=1804 audit(1573467976.840:117): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir710818192/syzkaller.zCDYJR/363/file0" dev="sda1" ino=17262 res=1 10:26:17 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x208204) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0x5, 0x1, 0x0, 0x1, [{}]}) [ 345.040690] SELinux: unknown common 10:26:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000440)) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 345.070538] SELinux: failed to load policy 10:26:17 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffff8e, 0x5, 0x0, {0x0, 0x0, 0x0, 0x100}}, 0x1c6) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:17 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\'c\x00', 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x33) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000300)=0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000018c0)={'vcan0\x00', 0x100}) rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000340)={0x18, 0x1f, 0x4}) r7 = creat(&(0x7f0000000400)='./file0\x00', 0x80) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) unlink(&(0x7f00000002c0)='./bus\x00') write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(r7) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r8, 0x1) sendmsg$nl_netfilter(r8, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x19d}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001900)='/proc/self/attr/current\x00', 0x2, 0x0) ftruncate(r0, 0x40001) preadv(r4, &(0x7f0000001880), 0x2000000000000104, 0x5f) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$FUSE_INIT(r9, &(0x7f0000000000)={0x50}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x0) getsockopt$sock_int(r9, 0x1, 0x3, &(0x7f0000000000), &(0x7f0000000140)=0x4) [ 345.154820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14170 comm=syz-executor.4 [ 345.181515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14170 comm=syz-executor.4 [ 345.257132] FS-Cache: Duplicate cookie detected [ 345.262077] FS-Cache: O-cookie c=00000000ae1bcdc6 [p=000000001ee102d9 fl=222 nc=0 na=1] [ 345.270262] FS-Cache: O-cookie d=00000000b71a2c7f n=0000000003d05af4 [ 345.276762] FS-Cache: O-key=[10] '34323934393731363834' [ 345.282247] FS-Cache: N-cookie c=0000000065dd1da9 [p=000000001ee102d9 fl=2 nc=0 na=1] [ 345.290252] FS-Cache: N-cookie d=00000000b71a2c7f n=0000000090e46c41 [ 345.296742] FS-Cache: N-key=[10] '34323934393731363834' [ 345.335505] audit: type=1400 audit(1573467977.310:118): avc: denied { shutdown } for pid=14175 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 10:26:17 executing program 5: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) memfd_create(0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c) 10:26:17 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') 10:26:17 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="020b000102000000000040000000000081f0b51c8dea5f1d24b1169e0edf1ab3233e03aa8c346f967772d2d161ecebc43607c964462e58ea2edd0f9b47c4fdad79a5ca2c97862d8c7cd2c7a10db2ec7f2a6a3f65785ab6548ccb1c918f02f4bac80f2e9b5dea8a4c8c0e95c9a6ecbe36228c4a71b21b02ada70bfeea1639d03f3c8f29bf083c22fac0caf0532c92e57ffd61eca3327adfc0fbb5a0bdd36c740292316c934400"/175], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 10:26:17 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x24400, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:17 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = inotify_init() ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) r3 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r3, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x7fc}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) pipe(0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x5d, 0x0, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r7 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r7, &(0x7f0000000300)={0xf}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) pipe(0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x9, 0x8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@loopback, @in6}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) r8 = socket$inet6(0x10, 0x0, 0x0) sendmsg(r8, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000c00160000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab", 0x53}], 0x1}, 0x0) [ 345.599735] SELinux: unknown common [ 345.612544] SELinux: failed to load policy 10:26:17 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') 10:26:17 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) [ 345.745013] SELinux: unknown common [ 345.755443] SELinux: failed to load policy 10:26:17 executing program 2: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x40) write$P9_RREAD(r3, 0x0, 0x22d) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="01000500aaaaaaaaaabbaaaa92aaaa12aaaaaaaaaaaaaaaaaaaaaabbaaaaaaaaaa13101315d3145df396384eeafa9e2d4e971e5125319cb5d07bfd15ea5434fe4919bf6a767f45f1536cc1e55e6deeb6c7acf6762ec9fa743f9aebb975e70176a1f1dc7f77fb3956b262a7dde8648b4a2694d5b7f1174d0226691ae5af82538a8c02f45ed6c33808b818b714ff28db2beac91bae2d618577ff15aea614fc4330c8d220e191f0a612046c6eaa32a3ec9931a75503b54fc6064b769a0c876b3f2d24e33068805e8b45ecd9cf5aca6f05771ac77b0712ba234a1c5f54feee832f4af261e2b52d87aa09883e1e2b0d95ce1969f49678f61fad285d698fb0a00726b6b0c1a00849fdc818e09fce5b21a1e1e6f3eb571e4980624649ba07cc28bd2e1fdbae7b4825ed80a3c48067d6de624f48ecc5c7ebd8c7bd25af1597457eda70f2df0814a4a913b0cacad2ba80b9eb0d2a4da9b5252b3528cd6683e2e5304a69d1e0294d99"]) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40046602, &(0x7f00000001c0)=0x20484030) read(r3, &(0x7f0000000580)=""/228, 0xe4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r7 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r7) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9e1e27f295d14a04d0887791ad495bdb4ff7f683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef359867f4bce453d3a47853e7af5d0028209ad732240000695e00000000000000000000000000ff010000850576cab6419dd44c143a56fdce00ff005a8cfc0e13557829b0ebfb0639c478ecacaabd97"], 0x0, 0x0, 0x38000, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_gettime(0x0, &(0x7f00000003c0)) sendfile(r1, r4, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)) nanosleep(0x0, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r6, 0x0) 10:26:17 executing program 4: pipe(&(0x7f0000000100)) read(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x4000) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x11, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xc7}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) syz_genetlink_get_family_id$tipc2(0x0) lstat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) 10:26:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x15}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000040)={{0x77359400}, 0x15, 0x0, 0x80000002}, 0x10) 10:26:17 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 345.838399] binder: BINDER_SET_CONTEXT_MGR already set [ 345.844457] binder: 14155:14165 ioctl 40046207 0 returned -16 [ 345.905569] input: syz1 as /devices/virtual/input/input17 [ 345.921952] SELinux: unknown common 10:26:17 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 345.977742] encrypted_key: insufficient parameters specified [ 346.002012] input: syz1 as /devices/virtual/input/input18 10:26:18 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 346.039321] audit: type=1804 audit(1573467978.010:119): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir049551289/syzkaller.yT30d9/442/bus" dev="sda1" ino=17281 res=1 [ 346.106966] SELinux: unknown common 10:26:18 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:18 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r3, &(0x7f0000002d00), 0x80000000000027a, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 10:26:18 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000080)=0x3) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) [ 346.252119] SELinux: unknown common 10:26:18 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:18 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) tkill(r0, 0x1000000000013) 10:26:18 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009740)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x400023f, 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) 10:26:18 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 10:26:18 executing program 2: mkdir(0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0x400007f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') [ 346.662963] audit: type=1400 audit(1573467978.640:120): avc: denied { map } for pid=14242 comm="syz-executor.4" path="/root/syzkaller-testdir802109239/syzkaller.ynBSNM/470/bus" dev="sda1" ino=17089 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 10:26:19 executing program 4: unshare(0x400) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000280), &(0x7f0000000300)=0x40) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000040)=0x400, 0x452) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000003e00000800000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000003e0200"/88], 0x58) r3 = socket$key(0xf, 0x3, 0x2) setrlimit(0x0, &(0x7f0000000240)={0xfffffffffffffffc, 0x4}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000200)) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) write$binfmt_aout(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="0701ff02540000005e030000030000006b01000001010000000000000000000090aee84b848b19c29c3257f41769c4c8d28340000000000000009ef5e84100"/73], 0x49) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='\x10dev/nell\x00', 0x301400, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000400)={0x100000000, 0x9, 0xfffffffffffffffb, 0x6, 0x54a, 0x9}) getpid() r5 = socket$inet6(0x10, 0x80002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') dup2(r6, r5) fadvise64(r5, 0x1, 0x4, 0x3) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f00000006c0)={0xffff, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e20, @empty}}}, 0x104) ioctl$TIOCLINUX2(r7, 0x541c, &(0x7f00000009c0)={0x2, 0x5, 0x8f0, 0x10, 0x0, 0x8}) ioctl$VT_RELDISP(r7, 0x5605) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000900)=0x4) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0xc, 0x20000000000401, 0x8, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4090) accept4(r7, &(0x7f0000000cc0)=@nfc, &(0x7f0000000c80)=0xfffffffffffffe88, 0x80800) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000008000000002002000900000000000000000000000000030006000000000002000000e0000800004058186fe8b90002000100000000000000070b00000000030005000000000002000000e00000010000000000000000"], 0x60}}, 0x0) 10:26:19 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:19 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000ac0)={0x54d4ff47, "606886a6010df1b99077e8d1aefd3433a2574cc81a11a7f033713fe4d18151a3", 0xa9a, 0x1, 0x9, 0x0, 0x1}) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "b6733713b0b430fb0dc68ee3366459cc5589536c"}, 0x15, 0x3) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x2f1e7f0fba6884c8, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}}}, 0xa0) eventfd2(0x282, 0x80001) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000540)=""/73, 0x49}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/178, 0xb2}, {&(0x7f00000002c0)}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/253, 0xfd}], 0x7, &(0x7f0000000a00)=""/89, 0x59}, 0x573dd961c3a2b3db) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000a80)=0x81, 0x4) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdir(&(0x7f0000000380)='./file0//ile0\x00', 0x4) 10:26:19 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 10:26:19 executing program 3: r0 = socket(0x2000000000010, 0x3, 0x0) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', @ifru_hwaddr}) 10:26:19 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:19 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e06164cfefcbb2748194fdd27d3230a10f68ac86fff3dd863c342ea50ec10954066c0b72de872210adb23b3a34edf8a31e774c4fbb4101577270b1c9ef5eb7b0f"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:19 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}}, 0x104) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4008040) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) close(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) pipe(0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8001, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:26:19 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) timer_settime(0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) lsetxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "d30722a7c614bf33e4c0ea86631a4c1c3e0b5896"}, 0x15, 0x2) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000440)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=0x3, 0x4) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x15acc76c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000600)=""/192) r5 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000004c0)=0x4) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd9e) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x1) 10:26:19 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000180)=0x4) socket(0x0, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x282000, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) socket$inet(0x2b, 0x1, 0x0) r4 = socket$inet(0x2b, 0x1, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) socket$inet_sctp(0x2, 0x0, 0x84) [ 347.638354] SELinux: unknown common 10:26:19 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 347.710740] SELinux: unknown common 10:26:19 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 347.735284] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 347.784750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 347.823816] SELinux: unknown common 10:26:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000006c0)) 10:26:19 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:19 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 347.849565] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 347.926146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 347.967722] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 347.990050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.001149] SELinux: unknown common 10:26:20 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl(r1, 0x707, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r0, r3) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x8) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000180)=0x2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x9c, &(0x7f0000000240), &(0x7f00000002c0)=0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000280)={0xb, 0xff, 0x3f8}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) fcntl$getownex(r6, 0x10, &(0x7f00000006c0)) ioctl$VT_RELDISP(r6, 0x5605) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCDISCONN(r7, 0x7439) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = gettid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) ptrace$setopts(0x4206, r8, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r8, 0x20) [ 348.011878] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 10:26:20 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) 10:26:20 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 348.045048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.085833] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 348.107581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:26:20 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 348.129385] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 348.137130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.146671] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 348.158078] SELinux: unknown common [ 348.159163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.169152] protocol 88fb is buggy, dev hsr_slave_0 [ 348.175542] protocol 88fb is buggy, dev hsr_slave_1 [ 348.199378] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 348.217491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.242058] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 348.259475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.273390] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 348.288277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:26:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@rand_addr, @local}, 0x7) 10:26:22 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:22 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) 10:26:22 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f00000006c0)=""/161, 0xa1) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000780)=ANY=[], 0x0, 0x4) read(r0, &(0x7f0000000580)=""/250, 0xfffffffffffffe33) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x22000, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = socket$inet6(0xa, 0x7, 0xfffffffffffffffe) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000100), 0xcb) fchdir(r3) creat(&(0x7f0000000540)='./file0\x00', 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000680)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) r7 = socket(0x11, 0x3, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e24, @remote}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x593440, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x44a000, 0x0) ioctl$TIOCLINUX4(r8, 0x541c, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e22, 0x8001, @initdev, 0x6}, {0xa, 0x4e23, 0x400000, @mcast2, 0x6}, 0xe8, [0x9, 0x0, 0x2, 0x4, 0x40, 0xffffffff, 0x9, 0x1f]}, 0x5c) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000140)=0x8) r9 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r10 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r10, &(0x7f00000000c0), 0x3bb1) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000100)={0x0, r10}) 10:26:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="80", 0x1}], 0x1) 10:26:22 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) 10:26:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 350.568652] SELinux: unknown common [ 350.569384] 9pnet: Insufficient options for proto=fd [ 350.583669] sel_write_load: 8 callbacks suppressed [ 350.583675] SELinux: failed to load policy [ 350.595796] 9pnet: Insufficient options for proto=fd 10:26:22 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x505240, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}}, 0x104) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) close(0xffffffffffffffff) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000001c0)={0xfff, 0x555e, 0x5, 0x1ff, 0x4, 0x30}) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) tee(r5, 0xffffffffffffffff, 0x8001, 0x0) openat$cgroup_int(r5, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) [ 350.638440] audit: type=1400 audit(1573467982.610:121): avc: denied { associate } for pid=14379 comm="syz-executor.3" name="ppp" dev="devtmpfs" ino=15163 scontext=system_u:object_r:mount_tmp_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 10:26:22 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="150030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) prctl$PR_MCE_KILL(0x21, 0x1, 0x4) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffc01, 0x4000) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:22 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) 10:26:22 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:22 executing program 4: socketpair$unix(0x1, 0x2004005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x8000, 0x100) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1ffff) add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000300), &(0x7f00000004c0)=0x8) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r3, &(0x7f0000000040), 0x8) close(r3) prctl$PR_SET_PDEATHSIG(0x1, 0xd) splice(r3, 0x0, r4, 0x0, 0x200, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000540)={0x0, 0x0}) getpgid(r5) rmdir(&(0x7f00000006c0)='./bus\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000002c0)="5c01000000000000060000") getsockname(r0, &(0x7f0000000400)=@l2, &(0x7f0000000480)=0x80) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000001c0)=0x14a) r7 = creat(&(0x7f0000000600)='./bus\x00', 0x200000000020004) lsetxattr$security_smack_entry(0x0, &(0x7f0000000000)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000000200)=0x91) chroot(&(0x7f0000000500)='./bus\x00') rmdir(&(0x7f0000000700)='./bus\x00') fallocate(r7, 0x28, 0x1, 0x80000001) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r9, &(0x7f00000000c0), 0xdd) 10:26:22 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:22 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) 10:26:22 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:23 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) 10:26:23 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, 0xffffffffffffffff, 0x0) 10:26:23 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c890cc5c5ac867a3453eef9a7b41acc36b61f273b41d353a27ce6c9413180191517424b8dee3e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setfsgid(r4) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x3ff, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 10:26:23 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 351.622927] audit: type=1804 audit(1573467983.600:122): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802109239/syzkaller.ynBSNM/476/bus" dev="sda1" ino=17305 res=1 10:26:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000440)) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x16) 10:26:25 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, 0xffffffffffffffff, 0x0) 10:26:25 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:25 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x8) 10:26:25 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x9, 0x1e0, '9P2000.L'}, 0x15) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write$P9_RVERSION(r2, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)={0x0, 0x0}) r6 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)="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", 0x1ca) sendfile(r6, r7, 0x0, 0x7fffffa7) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000003c0)={r6, r8, 0x800}) write$FUSE_BMAP(r3, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r9 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r9, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r10, r9, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0//ile0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x303000, 0x0) r12 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x80800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={r13}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000280)={r13, 0x8, 0x30}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000180)={r13, 0x59, 0x4, [0xd9b, 0x7, 0x2c7, 0x9]}, &(0x7f0000000200)=0x10) 10:26:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) [ 353.344511] audit: type=1800 audit(1573467985.320:123): pid=14464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17339 res=0 10:26:25 executing program 3: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0x80, &(0x7f0000000000)="b9f24e4673e04a688dc5ffa1ce29357b6bb69dd2c1e69d9cae9a75d345ac48dcf3e44d385514811887f83fb7ba2faa73ccacc03e5cfbe0a317d1a1697edd0250ef1c3e398d167de0c2211d5f9d7b2eebc4d2323251fa714653706aafc3bad174b846af0394a36b6a8b5b3fcda146c173b29b2d8c3d62d454006ff4853e5de6fb"}) 10:26:25 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, 0xffffffffffffffff, 0x0) 10:26:25 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 353.408834] audit: type=1804 audit(1573467985.320:124): pid=14464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir710818192/syzkaller.zCDYJR/374/file0/file0" dev="sda1" ino=17339 res=1 10:26:25 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) 10:26:25 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x1ca) sendfile(r4, r5, 0x0, 0x7fffffa7) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x120, r6, 0x609, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x2}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x2}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:25 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 353.560508] audit: type=1800 audit(1573467985.540:125): pid=14485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16487 res=0 [ 353.602196] audit: type=1804 audit(1573467985.540:126): pid=14485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir710818192/syzkaller.zCDYJR/375/file0/file0" dev="sda1" ino=16487 res=1 [ 353.632134] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 353.669328] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 353.684690] CPU: 0 PID: 14488 Comm: syz-executor.0 Not tainted 4.19.82 #0 [ 353.691645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.701003] Call Trace: [ 353.703609] dump_stack+0x172/0x1f0 [ 353.707251] warn_alloc.cold+0x7b/0x173 [ 353.711247] ? zone_watermark_ok_safe+0x260/0x260 [ 353.716103] ? lock_downgrade+0x880/0x880 10:26:25 executing program 2: unshare(0x20000) creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x1000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x2}, 0x1c) r1 = open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000240)={0x0, 0x7530}, 0xffffffffffffff87) listen(r0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) flistxattr(r3, &(0x7f0000000180)=""/114, 0xfffffffffffffe72) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) ioctl$sock_SIOCADDDLCI(r4, 0x8980, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) write(r5, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 10:26:25 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) 10:26:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xff2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12001, 0x0) [ 353.720269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.725820] ? avc_has_perm+0x404/0x610 [ 353.729889] __vmalloc_node_range+0x486/0x790 [ 353.734442] ? sel_write_load+0x1de/0x470 [ 353.738604] vmalloc+0x6b/0x90 [ 353.741805] ? sel_write_load+0x1de/0x470 [ 353.745966] sel_write_load+0x1de/0x470 [ 353.750000] __vfs_write+0x114/0x810 [ 353.753725] ? sel_make_policy_nodes+0x1520/0x1520 [ 353.758661] ? kernel_read+0x120/0x120 [ 353.762567] ? __lock_is_held+0xb6/0x140 10:26:25 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe8b) fcntl$addseals(r2, 0x409, 0x1) write(r1, &(0x7f00000001c0), 0xfffffef3) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x2) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000001c0)) read(r4, &(0x7f0000000a80)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f00000004c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') read(0xffffffffffffffff, &(0x7f0000000600)=""/34, 0x22) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000080)=""/38) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000540)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$packet(r5, &(0x7f0000000180)=""/88, 0x58, 0x0, &(0x7f0000000940)={0x11, 0x1a, 0x0, 0x1, 0x100, 0x6, @dev={[], 0xc}}, 0x14) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[], 0xfffffe8b) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580), 0xffffffffffffffbd, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[], 0x3}}, 0x10) [ 353.766649] ? rcu_read_lock_sched_held+0x110/0x130 [ 353.771677] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 353.776451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.782007] ? __sb_start_write+0x1a9/0x360 [ 353.786335] vfs_write+0x20c/0x560 [ 353.789889] ksys_write+0x14f/0x2d0 [ 353.793522] ? __ia32_sys_read+0xb0/0xb0 [ 353.797607] ? do_syscall_64+0x26/0x620 [ 353.801590] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.806962] ? do_syscall_64+0x26/0x620 [ 353.810942] __x64_sys_write+0x73/0xb0 [ 353.814831] do_syscall_64+0xfd/0x620 [ 353.818636] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.823827] RIP: 0033:0x45a219 [ 353.827026] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.845930] RSP: 002b:00007f9a60efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.853645] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 353.860927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 353.868199] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.875471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a60eff6d4 [ 353.882746] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 353.909399] Mem-Info: [ 353.912500] active_anon:188361 inactive_anon:213 isolated_anon:0 10:26:25 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 353.912500] active_file:8365 inactive_file:43263 isolated_file:0 [ 353.912500] unevictable:0 dirty:997 writeback:0 unstable:0 [ 353.912500] slab_reclaimable:14779 slab_unreclaimable:99198 [ 353.912500] mapped:59238 shmem:373 pagetables:2057 bounce:0 [ 353.912500] free:1175036 free_pcp:230 free_cma:0 [ 354.015660] Node 0 active_anon:753364kB inactive_anon:852kB active_file:33320kB inactive_file:174252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236852kB dirty:5188kB writeback:0kB shmem:1492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 593920kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 354.057588] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 354.090558] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.118173] lowmem_reserve[]: 0 2555 2557 2557 [ 354.129625] Node 0 DMA32 free:899172kB min:36248kB low:45308kB high:54368kB active_anon:748440kB inactive_anon:852kB active_file:33320kB inactive_file:176852kB unevictable:0kB writepending:7760kB present:3129332kB managed:2619976kB mlocked:0kB kernel_stack:8736kB pagetables:8228kB bounce:0kB free_pcp:1844kB local_pcp:1400kB free_cma:0kB 10:26:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f9c5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 10:26:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18}, 0x18) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000006c0)={0xa, @win={{0x80000001, 0x10001, 0x8000, 0x9}, 0x3, 0x9, &(0x7f0000000280)={{0x40b, 0x9, 0x7, 0x6ba9993a}, &(0x7f00000001c0)={{0x80000000, 0x8, 0x1, 0x9}}}, 0x6, &(0x7f0000000600)="804d14159f614410c613c503288a10c9f16c6c922c355e5b6e34df0129618b90e861dd7bdf0ee1b73e1af1aea34dbf76dff1cd43bf0d3e435037d2bfc1ca7af14dfc06dee577ecaa74774d85e5f5145a8c3cd5bbde4e8a9e9dfe0933dfa45cef697b18b5826e09c6cff16d360c44b99094a14636e527ad871691d5c930d8451ef2f5a9a3097ac6297e4e36d8110e2a73982f1ba29f5df5292bd2a9bf1df1415f66f5e9373664c046006c", 0x2}}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000580)={0xa, 0x4e20, 0x8000}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x13) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r5, 0x1) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x3ff51e1fe141ea69) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES64=r5, @ANYRESHEX=r1, @ANYRES16, @ANYRESOCT=r4, @ANYRESDEC=r1], @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 354.173927] lowmem_reserve[]: 0 0 2 2 [ 354.178758] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 10:26:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 354.241167] lowmem_reserve[]: 0 0 0 0 [ 354.245929] Node 1 Normal free:3784088kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.275366] lowmem_reserve[]: 0 0 0 0 [ 354.279845] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 354.294119] Node 0 DMA32: 5250*4kB (UE) 609*8kB (UME) 3629*16kB (UM) 1872*32kB (UME) 712*64kB (UME) 164*128kB (UME) 51*256kB (UE) 27*512kB (UME) 11*1024kB (UM) 2*2048kB (UE) 156*4096kB (M) = 891616kB 10:26:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 354.338835] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 354.369687] Node 1 Normal: 62*4kB (U) 252*8kB (UE) 279*16kB (UE) 66*32kB (UME) 18*64kB (UME) 9*128kB (U) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784072kB [ 354.383151] ptrace attach of "/root/syz-executor.4"[14534] was attempted by "/root/syz-executor.4"[14535] [ 354.417901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 10:26:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 354.441921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.466669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.509137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 354.521504] 53117 total pagecache pages [ 354.529007] 0 pages in swap cache [ 354.535044] Swap cache stats: add 0, delete 0, find 0/0 [ 354.546244] Free swap = 0kB [ 354.551794] Total swap = 0kB 10:26:26 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 354.557257] 1965979 pages RAM [ 354.563902] 0 pages HighMem/MovableOnly [ 354.571480] 338855 pages reserved [ 354.578468] 0 pages cma reserved [ 354.644828] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 354.658017] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 354.666814] CPU: 0 PID: 14545 Comm: syz-executor.0 Not tainted 4.19.82 #0 [ 354.673758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.683120] Call Trace: [ 354.685720] dump_stack+0x172/0x1f0 [ 354.689357] warn_alloc.cold+0x7b/0x173 [ 354.693343] ? zone_watermark_ok_safe+0x260/0x260 [ 354.698191] ? lock_downgrade+0x880/0x880 [ 354.702356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.707896] ? avc_has_perm+0x404/0x610 [ 354.711889] __vmalloc_node_range+0x486/0x790 [ 354.716399] ? sel_write_load+0x1de/0x470 [ 354.720568] vmalloc+0x6b/0x90 [ 354.720590] ? sel_write_load+0x1de/0x470 [ 354.720602] sel_write_load+0x1de/0x470 [ 354.720619] __vfs_write+0x114/0x810 [ 354.727934] ? sel_make_policy_nodes+0x1520/0x1520 [ 354.740499] ? kernel_read+0x120/0x120 [ 354.744396] ? __lock_is_held+0xb6/0x140 [ 354.748484] ? rcu_read_lock_sched_held+0x110/0x130 [ 354.753517] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 354.758271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.763802] ? __sb_start_write+0x1a9/0x360 [ 354.768122] vfs_write+0x20c/0x560 [ 354.771648] ksys_write+0x14f/0x2d0 [ 354.775267] ? __ia32_sys_read+0xb0/0xb0 [ 354.779313] ? do_syscall_64+0x26/0x620 [ 354.783268] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.788616] ? do_syscall_64+0x26/0x620 [ 354.792578] __x64_sys_write+0x73/0xb0 [ 354.796451] do_syscall_64+0xfd/0x620 [ 354.800241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.805411] RIP: 0033:0x45a219 [ 354.808598] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.827500] RSP: 002b:00007f9a60efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.835207] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 354.842469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 354.849730] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.856996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a60eff6d4 [ 354.864256] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff 10:26:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/i([/mice\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) setsockopt$inet_int(r3, 0x0, 0x0, &(0x7f00000000c0)=0xa, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x15a7351d996c9b89, 0x0, 0x0) r4 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f00000000c0)=0xa, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x8000000000001f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x15a7351d996c9b89, 0x0, 0x0) r5 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0), 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r6, 0x4, 0x40400) write$FUSE_WRITE(r6, &(0x7f0000000080)={0xfffffffffffffec2}, 0xfffffffffffffe53) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$inet6(0xa, 0x80004, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) gettid() 10:26:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) 10:26:26 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000000000)="2f0000001c00037affffff000d000000020000000000008c00c9109411052a00"/47, 0x2f}], 0x1}, 0x0) 10:26:26 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080)=0x5, 0x4) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rf~no=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 355.032015] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 355.039018] nla_parse: 54 callbacks suppressed [ 355.050265] 9pnet: Insufficient options for proto=fd [ 355.055554] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.4'. 10:26:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 355.075362] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 355.096477] 9pnet: Insufficient options for proto=fd [ 355.103367] CPU: 0 PID: 14561 Comm: syz-executor.0 Not tainted 4.19.82 #0 [ 355.110319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.119676] Call Trace: [ 355.122275] dump_stack+0x172/0x1f0 [ 355.125915] warn_alloc.cold+0x7b/0x173 10:26:27 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x7f0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x11, 0xe3, 0x0, 0x1000000, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x3}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x1000000, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0000001000000000000000002000100000000000000000b00000000030005000005000000000000e000"], 0x46}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000180)={0x8000200b}) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) [ 355.129904] ? zone_watermark_ok_safe+0x260/0x260 [ 355.134756] ? lock_downgrade+0x880/0x880 [ 355.138927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.144470] ? avc_has_perm+0x404/0x610 [ 355.148454] __vmalloc_node_range+0x486/0x790 [ 355.152979] ? sel_write_load+0x1de/0x470 [ 355.157134] vmalloc+0x6b/0x90 [ 355.160334] ? sel_write_load+0x1de/0x470 [ 355.164490] sel_write_load+0x1de/0x470 [ 355.168488] __vfs_write+0x114/0x810 [ 355.172216] ? sel_make_policy_nodes+0x1520/0x1520 [ 355.177155] ? kernel_read+0x120/0x120 10:26:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 355.181057] ? __lock_is_held+0xb6/0x140 [ 355.185138] ? rcu_read_lock_sched_held+0x110/0x130 [ 355.190169] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 355.194934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.200484] ? __sb_start_write+0x1a9/0x360 [ 355.204815] vfs_write+0x20c/0x560 [ 355.208365] ksys_write+0x14f/0x2d0 [ 355.212958] ? __ia32_sys_read+0xb0/0xb0 [ 355.217035] ? do_syscall_64+0x26/0x620 [ 355.221015] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.226386] ? do_syscall_64+0x26/0x620 10:26:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 355.230369] __x64_sys_write+0x73/0xb0 [ 355.234264] do_syscall_64+0xfd/0x620 [ 355.238077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.243274] RIP: 0033:0x45a219 [ 355.246469] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.265361] RSP: 002b:00007f9a60efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.265374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 10:26:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect(r0, &(0x7f0000000140)=@x25={0x9, @null=' \x00'}, 0x80) [ 355.265381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 355.265388] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 355.265395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a60eff6d4 [ 355.265403] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 355.463411] warn_alloc_show_mem: 1 callbacks suppressed [ 355.463416] Mem-Info: [ 355.470643] active_anon:191284 inactive_anon:213 isolated_anon:0 [ 355.470643] active_file:8368 inactive_file:42779 isolated_file:0 [ 355.470643] unevictable:0 dirty:518 writeback:0 unstable:0 [ 355.470643] slab_reclaimable:14863 slab_unreclaimable:99335 [ 355.470643] mapped:59230 shmem:373 pagetables:2078 bounce:0 [ 355.470643] free:1172022 free_pcp:626 free_cma:0 10:26:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') sendfile(r0, r0, 0x0, 0xdd) 10:26:27 executing program 4: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) openat$cgroup_ro(r0, &(0x7f0000000680)='\t\x00\x00\x00\x00 \x00\x00nts\x00Wji\xcc\x80J\xeb\xf8{P\x04y\x88sl\x18\x1a2\x8e\x13\x18M\xe7\xbdm`\xeb\x9d\xd3d\x86\xf6\xa1\x12\xa6\xf8\x8ehp\xe3+\xb9\xfa\x88\xba\x93\xcdm&\x1b\xff\xc6\xd2Eb\x85_\x03u\x97gf[N\x1fIb8\x8a5\xb4\xb5\x17\xbd0.*5\xcf\xeb|\xa1!\xd4\xd3H\a\x96\xf9f\xed.D\x04\x8f\x86?\x11\x9c\xae\xdd\xb63y\xfe\x17\xa4\x8ck\xc2\"n\x81\xd6`M\t[`#\x93\x0f\xa4\x17\x92\xa7\x81\xe5\x80\xd8\xcc\x80\xeb\xcfYt\x87\xdf\r\xdf\x99\xbf}\xa1\xc6\x8a\xb3Kd\xe4\xfb\xd6\xe5\x1dL\xdd(\xbe\x88\x02\x86t2jY\xe0\xfe\xbc\x1a\xc0\xbe%}V<\xec\xd6H\xc3\x90Em', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux\x00us\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f00000001c0), 0xbab230cf) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = gettid() rt_tgsigqueueinfo(0x0, r5, 0x16, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000000)={'syz'}) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) syncfs(r0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') getuid() openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffd4b) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00\x00M\x89Y\x9b\xfa\xf0\x98\x8f\x00', 0x1a13}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)) signalfd(r1, &(0x7f0000000340)={0x800}, 0x8) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000480}, 0xc, &(0x7f00000016c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r4], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/load\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') 10:26:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, r0, 0x0) [ 355.609117] protocol 88fb is buggy, dev hsr_slave_0 [ 355.621358] protocol 88fb is buggy, dev hsr_slave_1 [ 355.706134] Node 0 active_anon:769492kB inactive_anon:852kB active_file:33332kB inactive_file:171116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236920kB dirty:2072kB writeback:0kB shmem:1492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 608256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 355.810137] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 355.863036] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.908967] lowmem_reserve[]: 0 2555 2557 2557 [ 355.921694] Node 0 DMA32 free:872704kB min:36248kB low:45308kB high:54368kB active_anon:781732kB inactive_anon:852kB active_file:33332kB inactive_file:171116kB unevictable:0kB writepending:2072kB present:3129332kB managed:2619976kB mlocked:0kB kernel_stack:8800kB pagetables:8164kB bounce:0kB free_pcp:2064kB local_pcp:776kB free_cma:0kB [ 355.959146] protocol 88fb is buggy, dev hsr_slave_0 [ 355.964284] protocol 88fb is buggy, dev hsr_slave_1 [ 355.982659] lowmem_reserve[]: 0 0 2 2 [ 355.986544] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.018615] lowmem_reserve[]: 0 0 0 0 [ 356.023906] Node 1 Normal free:3784072kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.052452] lowmem_reserve[]: 0 0 0 0 [ 356.056384] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 356.070175] Node 0 DMA32: 5428*4kB (UM) 1369*8kB (UM) 3650*16kB (UM) 1891*32kB (UM) 714*64kB (UME) 164*128kB (UME) 51*256kB (UE) 27*512kB (UME) 11*1024kB (UM) 3*2048kB (UME) 149*4096kB (M) = 872856kB [ 356.088363] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 356.099983] Node 1 Normal: 62*4kB (U) 252*8kB (UE) 279*16kB (UE) 66*32kB (UME) 18*64kB (UME) 9*128kB (U) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784072kB [ 356.116881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.125768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.134579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.143492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 356.152147] 51518 total pagecache pages [ 356.156141] 0 pages in swap cache [ 356.159699] Swap cache stats: add 0, delete 0, find 0/0 [ 356.165065] Free swap = 0kB [ 356.168075] Total swap = 0kB [ 356.171208] 1965979 pages RAM [ 356.174343] 0 pages HighMem/MovableOnly [ 356.178308] 338855 pages reserved 10:26:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 10:26:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae6", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x4, 0x1c, &(0x7f0000000080)="d0bbdf2ea6b1f07cf249aa80913184350d7263870bca9c2210e78a2e"}) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:28 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) read(r2, &(0x7f0000000000)=""/250, 0xedf1d44) r5 = open(&(0x7f0000000380)='./file0\x00', 0x141842, 0xc) fcntl$setstatus(r5, 0x4, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000080)={0x18, 0xfffffffffffffff5, 0x1}, 0x18) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x0, 0x101, 0xffffffffffffff2e}}, 0x28) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r6, &(0x7f0000007e00), 0x40000000000025d, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threa`ed\x00', 0x9) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) mkdirat(0xffffffffffffffff, 0x0, 0x18) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="0b1be6bcb2ab54c8bb8b6752739ceda95b63200c6e8ea3a70d40b45f2797ff6079e68f0b717085a1bea591d276425dd175cd9bd8efc1a71ec7520c736bc8948dcc8fcb7d9847eafc7343d58779d043f9f42db94d7e395f586698c64238418035c38d944aab04527e99f53d1b75935fc43ffeb8e17d03660620b6e332c312218106cc4d51b6be4e24daa15d1f16281ae9fe2c29b63cf3547c9aeab39b4b299c8fd779f195c0ce57063a9c88172d72fe058a99b7ddf8"], &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, &(0x7f0000000980)) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r7, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 10:26:28 executing program 2: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xffffffe3) openat$cgroup_type(r6, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000a61ca133000005000000aa85000000000006000000000000000000000000000000000000000000000000f91ace8b92d71c230000000000000000005a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b54160368665ad2a299e587d4f6a2288bdb6d7dd728ad5fa9422680ed08902376b34e144f6a57607bda5cd6bb780fdd822a99d6a902af66a9ce7c6ec2b0c36e30237d8ea7817eb6e7853675a476fc1d120aa9deadd3b12a6974bc65d4e9fb2bcf794cef5b8c07e580"], 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xc7}, 0x1c) setsockopt$inet6_group_source_req(r7, 0x29, 0x11, &(0x7f0000000140)={0x2, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xc7}, 0x1c) setsockopt$inet6_group_source_req(r8, 0x29, 0x11, &(0x7f0000000140)={0x2, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) r9 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xc7}, 0x1c) setsockopt$inet6_group_source_req(r9, 0x29, 0x11, &(0x7f0000000140)={0x2, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xfffffffffffffd65) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') lstat(&(0x7f0000000080)='./bus\x00', 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) fcntl$setstatus(r10, 0x4, 0x0) sendfile(r10, r10, 0x0, 0x80003) pwrite64(r10, &(0x7f0000000300)="e54e77d103565b113288c65f38a22a25b637db56783e677cb932bbfc301d860ae5c69cb5c454ea010bc2fec87e7b768cde79d897b1ee9c85e76c4940107fe0fb82a2d93874732c08198baecbb06f6b920001d462f75bbca6dc40e794afe797eba6b0b8b36f91bab095160e12eb8a3e61fad4d0cebe56b210cb258618b0e488b00e2933feb30487da77303bcc2cf7a122ef9937032dea5f98d057f8e411fddbcafe2605fc7895a8e4d44fea8a80f0d9cc83ebca0d86388bd9", 0xb8, 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) [ 356.178314] 0 pages cma reserved 10:26:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 356.283703] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 356.325853] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 356.346253] CPU: 1 PID: 14647 Comm: syz-executor.0 Not tainted 4.19.82 #0 [ 356.353220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.362584] Call Trace: [ 356.365196] dump_stack+0x172/0x1f0 [ 356.368846] warn_alloc.cold+0x7b/0x173 [ 356.372833] ? zone_watermark_ok_safe+0x260/0x260 [ 356.377861] ? lock_downgrade+0x880/0x880 [ 356.382028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.387574] ? avc_has_perm+0x404/0x610 [ 356.391583] __vmalloc_node_range+0x486/0x790 [ 356.396090] ? sel_write_load+0x1de/0x470 [ 356.396107] vmalloc+0x6b/0x90 [ 356.403437] ? sel_write_load+0x1de/0x470 [ 356.407596] sel_write_load+0x1de/0x470 [ 356.411584] __vfs_write+0x114/0x810 [ 356.415309] ? sel_make_policy_nodes+0x1520/0x1520 [ 356.420255] ? kernel_read+0x120/0x120 [ 356.420275] ? __lock_is_held+0xb6/0x140 [ 356.420299] ? rcu_read_lock_sched_held+0x110/0x130 [ 356.420314] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 356.420328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.420342] ? __sb_start_write+0x1a9/0x360 [ 356.420357] vfs_write+0x20c/0x560 [ 356.420374] ksys_write+0x14f/0x2d0 [ 356.455045] ? __ia32_sys_read+0xb0/0xb0 [ 356.459119] ? do_syscall_64+0x26/0x620 [ 356.459135] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.459148] ? do_syscall_64+0x26/0x620 [ 356.459166] __x64_sys_write+0x73/0xb0 [ 356.459184] do_syscall_64+0xfd/0x620 [ 356.459201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.459212] RIP: 0033:0x45a219 [ 356.459228] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.488491] RSP: 002b:00007f9a60efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.488508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 356.488515] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 356.488527] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 356.536981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a60eff6d4 [ 356.544246] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff 10:26:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 356.555811] audit: type=1804 audit(1573467988.530:127): pid=14657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir301086102/syzkaller.tEbqUl/476/bus" dev="sda1" ino=17371 res=1 10:26:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, 0xffffffffffffffff, 0x0) 10:26:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f0000000600)=""/208, 0xd0}], 0x2, 0x3) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18, 0xfffffffffffffff5}, 0x18) timerfd_create(0x6, 0x80800) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, 0xffffffffffffffff, 0x0) [ 356.760314] Mem-Info: [ 356.763332] active_anon:197132 inactive_anon:214 isolated_anon:0 [ 356.763332] active_file:8368 inactive_file:43315 isolated_file:0 [ 356.763332] unevictable:0 dirty:274 writeback:0 unstable:0 [ 356.763332] slab_reclaimable:14866 slab_unreclaimable:99465 [ 356.763332] mapped:59244 shmem:373 pagetables:2135 bounce:0 [ 356.763332] free:1165598 free_pcp:371 free_cma:0 [ 356.845249] Node 0 active_anon:790688kB inactive_anon:856kB active_file:33332kB inactive_file:173260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236976kB dirty:1096kB writeback:0kB shmem:1492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 618496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 10:26:28 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0) 10:26:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x100000000002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x211, 0xffffffffffffffff, 0x0) 10:26:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8f2b, 0x80) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 356.906199] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 10:26:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) bind$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x12) r5 = accept4(r3, 0x0, &(0x7f00000000c0), 0x80000) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x0, r2}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000000700010005080800418e00000004fcff", 0x58}], 0x1) fsetxattr(r6, &(0x7f0000000180)=@known='trusted.overlay.opaque\x00', &(0x7f0000000200)='\x00', 0x1, 0x0) recvmsg(r4, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x62e31cacc2709814, 0x0, &(0x7f0000000140)) dup2(r3, r4) ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000001c0)={&(0x7f0000000340)=""/4096, 0x1000}) r7 = gettid() sendto$inet6(r5, &(0x7f0000001340)="a12e10da800390318ab7df31b6a6dd97b8b872829a1f7b9213721973cda2f00fe2f7f46ddbf3e2cb3241ce6eb740f5ea7bbd8b3d2c46c6c62969c1d8cb837c6701140cebf065470ec47731522ce519801e99bbac5e40e29ae29e52e208851fadc08075893a7123daf9f75cd133c0e2ae482ea66ef94fd9f21b51972f313eb0", 0x7f, 0x20048060, 0x0, 0x0) tkill(r7, 0x16) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x19, 0x3) sendto$packet(r1, &(0x7f0000000300)='\x00', 0x1, 0x3ffffff, 0x0, 0x0) [ 356.964551] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.082232] lowmem_reserve[]: 0 2555 2557 2557 [ 357.086885] Node 0 DMA32 free:882684kB min:36248kB low:45308kB high:54368kB active_anon:765852kB inactive_anon:856kB active_file:33332kB inactive_file:173260kB unevictable:0kB writepending:1096kB present:3129332kB managed:2619976kB mlocked:0kB kernel_stack:8704kB pagetables:8244kB bounce:0kB free_pcp:2612kB local_pcp:1484kB free_cma:0kB [ 357.134558] audit: type=1804 audit(1573467989.110:128): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir301086102/syzkaller.tEbqUl/476/bus" dev="sda1" ino=17371 res=1 [ 357.139199] lowmem_reserve[]: 0 0 2 2 [ 357.167945] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.200955] lowmem_reserve[]: 0 0 0 0 [ 357.205361] Node 1 Normal free:3784072kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.234016] lowmem_reserve[]: 0 0 0 0 [ 357.238366] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 357.254218] Node 0 DMA32: 5103*4kB (UME) 1149*8kB (UME) 3694*16kB (UME) 1913*32kB (UME) 726*64kB (UME) 165*128kB (UM) 50*256kB (U) 26*512kB (UM) 12*1024kB (UME) 2*2048kB (UE) 151*4096kB (M) = 878500kB [ 357.274692] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 357.287037] Node 1 Normal: 62*4kB (U) 251*8kB (UE) 279*16kB (UE) 66*32kB (UME) 18*64kB (UME) 9*128kB (U) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784064kB [ 357.305905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.315365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 357.335428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.344915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 357.354053] 52031 total pagecache pages [ 357.358230] 0 pages in swap cache [ 357.362319] Swap cache stats: add 0, delete 0, find 0/0 [ 357.367837] Free swap = 0kB [ 357.371311] Total swap = 0kB [ 357.374491] 1965979 pages RAM [ 357.377724] 0 pages HighMem/MovableOnly [ 357.382184] 338855 pages reserved 10:26:29 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:29 executing program 5: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) [ 357.385778] 0 pages cma reserved 10:26:29 executing program 3: pipe(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x1000000) 10:26:29 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)) 10:26:29 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000280)={0x0, 0x85}, 0x2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x2ac, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x38}, 0xa83}}, {0x20, 0x2, @in6={0xa, 0xfe0, 0xffffffff, @empty, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xff, @mcast2, 0x1ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="924a564096f235960389e28b364816e3", 0xafc7}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hwsim0\x00'}}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2ba5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 357.416398] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 357.430319] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 357.435741] CPU: 0 PID: 14695 Comm: syz-executor.0 Not tainted 4.19.82 #0 [ 357.442668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.452024] Call Trace: [ 357.454632] dump_stack+0x172/0x1f0 [ 357.458285] warn_alloc.cold+0x7b/0x173 [ 357.462271] ? zone_watermark_ok_safe+0x260/0x260 [ 357.467132] ? lock_downgrade+0x880/0x880 [ 357.471303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.476859] ? avc_has_perm+0x404/0x610 [ 357.480854] __vmalloc_node_range+0x486/0x790 [ 357.485362] ? sel_write_load+0x1de/0x470 [ 357.485380] vmalloc+0x6b/0x90 [ 357.485394] ? sel_write_load+0x1de/0x470 [ 357.485410] sel_write_load+0x1de/0x470 [ 357.500834] __vfs_write+0x114/0x810 [ 357.500852] ? sel_make_policy_nodes+0x1520/0x1520 [ 357.500867] ? kernel_read+0x120/0x120 [ 357.500886] ? __lock_is_held+0xb6/0x140 [ 357.500912] ? rcu_read_lock_sched_held+0x110/0x130 [ 357.509531] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 357.509547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.509562] ? __sb_start_write+0x1a9/0x360 [ 357.509579] vfs_write+0x20c/0x560 [ 357.509595] ksys_write+0x14f/0x2d0 [ 357.509611] ? __ia32_sys_read+0xb0/0xb0 [ 357.530815] FS-Cache: Duplicate cookie detected [ 357.532818] ? do_syscall_64+0x26/0x620 [ 357.532836] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.532849] ? do_syscall_64+0x26/0x620 [ 357.532867] __x64_sys_write+0x73/0xb0 [ 357.537180] FS-Cache: O-cookie c=00000000289bf07e [p=000000001ee102d9 fl=222 nc=0 na=1] [ 357.540704] do_syscall_64+0xfd/0x620 [ 357.540721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.540736] RIP: 0033:0x45a219 [ 357.544341] FS-Cache: O-cookie d=00000000b71a2c7f n=00000000516e3840 [ 357.548391] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.553062] FS-Cache: O-key=[10] ' [ 357.556992] RSP: 002b:00007f9a60efec78 EFLAGS: 00000246 [ 357.562372] 34 [ 357.566311] ORIG_RAX: 0000000000000001 [ 357.570194] 32 [ 357.578296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 357.578304] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 357.578311] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 357.578318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a60eff6d4 10:26:29 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000fc3ff6)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) 10:26:29 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, 0x0, 0x0) gettid() vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:26:29 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 357.578325] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 357.616399] 39 [ 357.625284] 34 [ 357.661998] 393732393032' [ 357.662036] FS-Cache: N-cookie c=00000000af71cd4b [p=000000001ee102d9 fl=2 nc=0 na=1] [ 357.662044] FS-Cache: N-cookie d=00000000b71a2c7f n=00000000f24d71c5 [ 357.662054] FS-Cache: N-key=[10] '34323934393732393032' [ 357.724409] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 357.762612] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 357.768124] CPU: 1 PID: 14712 Comm: syz-executor.0 Not tainted 4.19.82 #0 [ 357.775056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.784439] Call Trace: [ 357.787037] dump_stack+0x172/0x1f0 [ 357.790695] warn_alloc.cold+0x7b/0x173 [ 357.794681] ? zone_watermark_ok_safe+0x260/0x260 [ 357.799531] ? lock_downgrade+0x880/0x880 [ 357.803697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.809236] ? avc_has_perm+0x404/0x610 [ 357.813230] __vmalloc_node_range+0x486/0x790 [ 357.817742] ? sel_write_load+0x1de/0x470 [ 357.821903] vmalloc+0x6b/0x90 [ 357.825099] ? sel_write_load+0x1de/0x470 [ 357.829258] sel_write_load+0x1de/0x470 [ 357.833250] __vfs_write+0x114/0x810 [ 357.836990] ? sel_make_policy_nodes+0x1520/0x1520 [ 357.841948] ? kernel_read+0x120/0x120 [ 357.845851] ? __lock_is_held+0xb6/0x140 [ 357.849936] ? rcu_read_lock_sched_held+0x110/0x130 [ 357.854959] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 357.856881] sock: process `syz-executor.3' is using obsolete getsockopt SO_BSDCOMPAT [ 357.859718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 10:26:29 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f00000000c0)=0x4d) 10:26:29 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) llistxattr(&(0x7f0000000080)='./file0//ile0\x00', &(0x7f00000004c0)=""/224, 0xe0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000180)=0x3a, 0x4) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000140)={0x3d, 0x3}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r6 = socket$inet6(0xa, 0x40000080806, 0x0) r7 = open(&(0x7f00000001c0)='./file0//ile0\x00', 0x20000, 0x3) ioctl$RNDADDTOENTCNT(r7, 0x40045201, &(0x7f0000000280)=0x5) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r6, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r8, r6, 0x0) dup(r6) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, "c3826ae64194b5b73c76b7e0239558ef2783beae10642296bd953592b8f83cf72f42616f97858c3972890d835fafceafa222df4f86ae4a0b2b26c54ea4dcd0d44c571d989d56dff8d6f16d264cb46556"}, 0xd8) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x101000) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x100c00) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x71, 0x6b025c89}) prctl$PR_GET_SECUREBITS(0x1b) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000020000000000000004000000000000001000feff0000000020000000000000000c77e73df5c40a32aa10e8b9da32b34d8091365c479e0b98f8358432ede4e89d37039586e31d4dfca20ff4966a7b"], 0x24, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='\x00\x00\x00') fchdir(r5) ftruncate(r2, 0x0) r6 = accept4$inet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80c00) getsockopt$inet_udp_int(r6, 0x11, 0x7b, &(0x7f0000000180), &(0x7f0000000200)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r8, &(0x7f00000013c0)=[{&(0x7f0000000000)="8f", 0xfffffe73}], 0x1, 0x0) splice(r7, 0x0, r9, 0x0, 0x10005, 0x0) [ 357.859736] ? __sb_start_write+0x1a9/0x360 [ 357.859754] vfs_write+0x20c/0x560 [ 357.859771] ksys_write+0x14f/0x2d0 [ 357.859787] ? __ia32_sys_read+0xb0/0xb0 [ 357.859804] ? do_syscall_64+0x26/0x620 [ 357.859817] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.859834] ? do_syscall_64+0x26/0x620 [ 357.902021] __x64_sys_write+0x73/0xb0 [ 357.905926] do_syscall_64+0xfd/0x620 [ 357.909740] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.914931] RIP: 0033:0x45a219 [ 357.918127] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.937037] RSP: 002b:00007f9a60efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.944756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 357.952030] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 357.959308] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 357.966582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a60eff6d4 [ 357.973859] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 357.987981] audit: type=1400 audit(1573467989.960:129): avc: denied { create } for pid=14709 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 [ 358.015744] warn_alloc_show_mem: 1 callbacks suppressed [ 358.015749] Mem-Info: [ 358.024240] active_anon:192427 inactive_anon:213 isolated_anon:0 [ 358.024240] active_file:8369 inactive_file:43552 isolated_file:0 [ 358.024240] unevictable:0 dirty:1063 writeback:0 unstable:0 [ 358.024240] slab_reclaimable:14820 slab_unreclaimable:99857 [ 358.024240] mapped:59248 shmem:373 pagetables:2172 bounce:0 [ 358.024240] free:1169583 free_pcp:488 free_cma:0 [ 358.059235] Node 0 active_anon:769608kB inactive_anon:852kB active_file:33336kB inactive_file:174608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236892kB dirty:4652kB writeback:0kB shmem:1492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 622592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 358.122285] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 358.159332] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.192605] lowmem_reserve[]: 0 2555 2557 2557 [ 358.197408] Node 0 DMA32 free:879880kB min:36248kB low:45308kB high:54368kB active_anon:767412kB inactive_anon:852kB active_file:33336kB inactive_file:177108kB unevictable:0kB writepending:7220kB present:3129332kB managed:2619976kB mlocked:0kB kernel_stack:8992kB pagetables:8688kB bounce:0kB free_pcp:932kB local_pcp:392kB free_cma:0kB [ 358.269262] lowmem_reserve[]: 0 0 2 2 [ 358.273456] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.321707] lowmem_reserve[]: 0 0 0 0 [ 358.329108] Node 1 Normal free:3784064kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.377615] lowmem_reserve[]: 0 0 0 0 [ 358.383985] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 358.404599] Node 0 DMA32: 4851*4kB (U) 692*8kB (UM) 4043*16kB (UME) 1951*32kB (UM) 725*64kB (UME) 167*128kB (UME) 51*256kB (UE) 27*512kB (UME) 11*1024kB (UM) 4*2048kB (UME) 148*4096kB (M) = 872380kB [ 358.435084] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 358.453612] Node 1 Normal: 62*4kB (U) 251*8kB (UE) 279*16kB (UE) 66*32kB (UME) 18*64kB (UME) 9*128kB (U) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784064kB [ 358.479640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.493165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 358.506462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.530407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 358.553538] 54968 total pagecache pages [ 358.557633] 0 pages in swap cache [ 358.568538] Swap cache stats: add 0, delete 0, find 0/0 [ 358.589153] Free swap = 0kB [ 358.599165] Total swap = 0kB [ 358.605653] 1965979 pages RAM [ 358.608831] 0 pages HighMem/MovableOnly [ 358.625791] 338855 pages reserved [ 358.638336] 0 pages cma reserved 10:26:32 executing program 2: creat(0x0, 0x0) getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) pivot_root(0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) listen(r0, 0x80) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c, 0x80000) 10:26:32 executing program 5: r0 = socket$packet(0x11, 0x1000000000003, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) mprotect(&(0x7f00004da000/0x3000)=nil, 0x3000, 0xffffffffffffffff) 10:26:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = dup(r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000002940)=""/4096, 0x74}], 0x1) 10:26:32 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:32 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) read$FUSE(r3, &(0x7f0000000600), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x6, 0x4) 10:26:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f0000000100)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0), 0x4) [ 360.160607] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 360.194505] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 360.208861] CPU: 0 PID: 14748 Comm: syz-executor.0 Not tainted 4.19.82 #0 [ 360.215820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.225202] Call Trace: [ 360.227849] dump_stack+0x172/0x1f0 [ 360.231495] warn_alloc.cold+0x7b/0x173 [ 360.235483] ? zone_watermark_ok_safe+0x260/0x260 [ 360.240339] ? lock_downgrade+0x880/0x880 [ 360.244511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.250064] ? avc_has_perm+0x404/0x610 [ 360.254054] __vmalloc_node_range+0x486/0x790 [ 360.258574] ? sel_write_load+0x1de/0x470 [ 360.262739] vmalloc+0x6b/0x90 [ 360.265943] ? sel_write_load+0x1de/0x470 [ 360.270096] sel_write_load+0x1de/0x470 [ 360.274102] __vfs_write+0x114/0x810 [ 360.277822] ? sel_make_policy_nodes+0x1520/0x1520 [ 360.282759] ? kernel_read+0x120/0x120 [ 360.286787] ? __lock_is_held+0xb6/0x140 [ 360.290870] ? rcu_read_lock_sched_held+0x110/0x130 [ 360.295896] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 360.300660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.306209] ? __sb_start_write+0x1a9/0x360 [ 360.310677] vfs_write+0x20c/0x560 [ 360.314232] ksys_write+0x14f/0x2d0 [ 360.317866] ? __ia32_sys_read+0xb0/0xb0 [ 360.321944] ? do_syscall_64+0x26/0x620 [ 360.325923] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.331416] ? do_syscall_64+0x26/0x620 [ 360.335406] __x64_sys_write+0x73/0xb0 [ 360.339304] do_syscall_64+0xfd/0x620 [ 360.343127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.348324] RIP: 0033:0x45a219 10:26:32 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950fb3030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000080)={0x3ff, 0x6}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @mss={0x2, 0x22}, @sack_perm, @mss={0x2, 0x200}, @window={0x3, 0x1, 0x7}], 0x6) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x1ca) sendfile(r4, r6, 0x0, 0x7fffffa7) write$P9_RWRITE(r4, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x80}, 0xb) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d2ef313034a1996aedb8ab1018012637f4a4e683afa3672bddaf9975258d578517fa8499e6870b1b569ae2f4dbe2c093c907163791b77109b2c0434d735acb536556e636ada3b3247e6412ec2c7b1db42a5ee66becc92627dd11c96ca8c5ba0ef91197d162fb87ea000427948b9fdcd658dd2cba3c0a6dcb35baa74fb53d3ea2f771954072100000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 360.351529] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.370438] RSP: 002b:00007f9a60efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 360.378164] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 360.385443] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 360.392724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 10:26:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 360.395566] audit: type=1800 audit(1573467992.370:130): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17393 res=0 [ 360.399998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a60eff6d4 [ 360.400007] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 360.435056] 9pnet: Insufficient options for proto=fd [ 360.457191] 9pnet: Insufficient options for proto=fd [ 360.462674] audit: type=1804 audit(1573467992.410:131): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir710818192/syzkaller.zCDYJR/385/file0/file0" dev="sda1" ino=17393 res=1 10:26:32 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000000007200000000002ae232d7b744cbf2cfcfd69f64ba41fdfd27ba530f79b0b4780d46b336213a16"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xfffffffffffffff5, 0x0, {{0x0, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x7ff}}}}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 360.516658] Mem-Info: [ 360.520363] active_anon:191335 inactive_anon:212 isolated_anon:0 [ 360.520363] active_file:8374 inactive_file:42819 isolated_file:0 [ 360.520363] unevictable:0 dirty:311 writeback:0 unstable:0 [ 360.520363] slab_reclaimable:14811 slab_unreclaimable:99732 [ 360.520363] mapped:59213 shmem:373 pagetables:2198 bounce:0 [ 360.520363] free:1145152 free_pcp:412 free_cma:0 10:26:32 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="24000000220007031dfffd946f610500001700000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 360.557281] audit: type=1804 audit(1573467992.410:132): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir710818192/syzkaller.zCDYJR/385/file0/file0" dev="sda1" ino=17393 res=1 [ 360.613148] Node 0 active_anon:767376kB inactive_anon:848kB active_file:33356kB inactive_file:171276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236852kB dirty:1244kB writeback:0kB shmem:1492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 622592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 360.649120] protocol 88fb is buggy, dev hsr_slave_0 [ 360.654310] protocol 88fb is buggy, dev hsr_slave_1 10:26:32 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x3, 0x3, 0x2, 0x6b3, 0x5, 0x8], 0x6, 0x7, 0x6, 0x2b4, 0xa6d, 0x5, {0x2, 0x400, 0x4, 0x8, 0x6, 0x8, 0x7ff, 0x1, 0x4, 0x7, 0x3ff, 0x2, 0xc388, 0x9, "9aaaa2d6eb4abaeabb548847fc2cbfdf48fd1428ec77023dbe89812dba14224d"}}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:32 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r2) syz_open_dev$mice(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)) r6 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) sendfile(r6, r6, 0x0, 0xa198) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x427}], 0x1) write(r1, &(0x7f0000000340), 0x41395527) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x0, r7) epoll_pwait(r9, &(0x7f0000000100)=[{}], 0x1, 0x86e, 0x0, 0x0) r10 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r10, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) sendfile(0xffffffffffffffff, r10, 0x0, 0xa198) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x7}, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) vmsplice(r12, 0x0, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r13+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 360.677892] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 360.757553] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.789133] lowmem_reserve[]: 0 2555 2557 2557 [ 360.794015] Node 0 DMA32 free:682056kB min:36248kB low:45308kB high:54368kB active_anon:769536kB inactive_anon:848kB active_file:33356kB inactive_file:171276kB unevictable:0kB writepending:1244kB present:3129332kB managed:2619976kB mlocked:0kB kernel_stack:9056kB pagetables:8792kB bounce:0kB free_pcp:1404kB local_pcp:244kB free_cma:0kB [ 360.847183] lowmem_reserve[]: 0 0 2 2 [ 360.854785] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.882712] lowmem_reserve[]: 0 0 0 0 [ 360.887294] Node 1 Normal free:3784064kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.916923] lowmem_reserve[]: 0 0 0 0 [ 360.921103] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 360.935163] Node 0 DMA32: 348*4kB (UME) 1562*8kB (UME) 2371*16kB (ME) 1283*32kB (ME) 485*64kB (UM) 47*128kB (ME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 119*4096kB (M) = 624016kB [ 360.955476] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 360.967227] Node 1 Normal: 62*4kB (U) 251*8kB (UE) 279*16kB (UE) 66*32kB (UME) 18*64kB (UME) 9*128kB (U) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784064kB [ 360.984963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 10:26:33 executing program 2: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000200099e6003b0000000000000000e7ffffffffffffff0000", 0xfdf9) [ 361.034319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.056329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.087332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 361.110505] 51564 total pagecache pages [ 361.136009] 0 pages in swap cache [ 361.143134] Swap cache stats: add 0, delete 0, find 0/0 [ 361.155104] Free swap = 0kB [ 361.162738] Total swap = 0kB [ 361.174403] 1965979 pages RAM [ 361.177580] 0 pages HighMem/MovableOnly [ 361.192887] 338855 pages reserved [ 361.205954] 0 pages cma reserved [ 361.209693] protocol 88fb is buggy, dev hsr_slave_0 [ 361.209745] protocol 88fb is buggy, dev hsr_slave_1 10:26:34 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = open(0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000100)) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x4040808) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x44005) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x400000000001) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x19) gettid() r5 = dup2(r4, r1) pipe(0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r6, 0x0, r0, 0x0, 0x7fffffff, 0x0) 10:26:34 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x1f) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0400000000000000323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18, 0x0, 0x4}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) connect$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x1, @empty}}, 0x1e) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,dno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:34 executing program 3: prctl$PR_GET_SECCOMP(0x15) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/mls\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141442, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x20000000000001c1) write$P9_RREMOVE(r5, &(0x7f0000000140)={0x7}, 0x7) syncfs(r1) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) 10:26:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="c4", 0x1, 0x800, 0x0, 0x0) 10:26:34 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000380)=""/148, 0x94}], 0xde, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003) [ 362.173803] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 362.204788] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 362.215307] 9pnet: Insufficient options for proto=fd [ 362.232627] CPU: 0 PID: 14806 Comm: syz-executor.0 Not tainted 4.19.82 #0 [ 362.239586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.248942] Call Trace: [ 362.248971] dump_stack+0x172/0x1f0 [ 362.255173] warn_alloc.cold+0x7b/0x173 [ 362.259162] ? zone_watermark_ok_safe+0x260/0x260 [ 362.264017] ? lock_downgrade+0x880/0x880 [ 362.268187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.273734] ? avc_has_perm+0x404/0x610 [ 362.277725] __vmalloc_node_range+0x486/0x790 [ 362.277751] ? sel_write_load+0x1de/0x470 [ 362.286388] vmalloc+0x6b/0x90 [ 362.289594] ? sel_write_load+0x1de/0x470 [ 362.293747] sel_write_load+0x1de/0x470 [ 362.297732] __vfs_write+0x114/0x810 [ 362.301455] ? sel_make_policy_nodes+0x1520/0x1520 [ 362.306396] ? kernel_read+0x120/0x120 [ 362.310300] ? __lock_is_held+0xb6/0x140 [ 362.314379] ? rcu_read_lock_sched_held+0x110/0x130 [ 362.319408] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 362.324169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.329714] ? __sb_start_write+0x1a9/0x360 [ 362.334047] vfs_write+0x20c/0x560 [ 362.337595] ksys_write+0x14f/0x2d0 [ 362.341238] ? __ia32_sys_read+0xb0/0xb0 [ 362.345312] ? do_syscall_64+0x26/0x620 [ 362.349296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.354668] ? do_syscall_64+0x26/0x620 [ 362.358653] __x64_sys_write+0x73/0xb0 [ 362.358673] do_syscall_64+0xfd/0x620 [ 362.366354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.366369] RIP: 0033:0x45a219 10:26:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 10:26:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="bfb6ae7585bc014435cd746d079b39ea7dbfe7e5ba8ddab7e0f3c99791fc7ce4b9066bb57f012ef1acba5d6e74775b640ec9b5df54fb6225cfc6283cdf44ace489e69a6ebaeecc5974156692153d9bf1ccf45112bb3738b5cc121e33393d864be10951f5658c20cc67ae3e7e4585aa3828edbab8cc0c954266ce4326cab13886ae6925bfb7913b2027904e6efc72fa1b280466f4c9d5e119e200ddaaee0da7568a54d02cd54df87cbc0bb60f8c45c79528712949bb849afd87"], 0x1, 0x1) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r4 = getpid() r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0) prlimit64(r4, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(r3, &(0x7f0000002480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r2, 0x24) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/netlink\x00') ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) 10:26:34 executing program 4: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000003c0)=0x1, 0x90) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8020022}, 0xc, &(0x7f0000000600)={&(0x7f0000000900)=ANY=[@ANYBLOB="25c36c2200da0f35a2b66a5686d60000f0722f78f86b0d1295684dfc07db5ec5aa9d7b59c4d1a6700b63d190c665938141bf560ebc39b49d2815aecd3c1e5ee6320fb20d000000", @ANYRES16=r2, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000400)='./file2\x00', 0x2) mkdir(&(0x7f0000000680)='./control\x00', 0x0) r5 = open(&(0x7f0000000100)='./control\x00', 0x0, 0x0) mknodat(r5, &(0x7f0000000000)='./control\x00', 0x1008, 0x0) faccessat(r5, &(0x7f000003fff6)='./control\x00', 0x7, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001e40)=0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0x4) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='\xcd\x01\x00\x00\x00\x00\x00\x00\x01\x04', 0x0, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xffffff78) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_VL_READ(r8, 0x80047013, &(0x7f0000000100)) write(r8, &(0x7f00000001c0), 0xffffffe0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x15}) r9 = syz_open_pts(r7, 0x1) dup3(r9, r7, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(r10, 0x1) dup3(r11, r10, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1) fcntl$getownex(r5, 0x10, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(r3) r12 = socket(0x80000000010, 0x80802, 0x0) sched_rr_get_interval(r6, &(0x7f0000000140)) write(r12, &(0x7f00000004c0)="2400000058001f02ff03f4f9002304000a1ff51108000100020100020600028001000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r13 = creat(&(0x7f00000004c0)='./bus\x00', 0xd8) r14 = getegid() ioctl$TUNSETGROUP(r13, 0x400454ce, r14) write$P9_RLINK(r13, &(0x7f0000000500)={0x7, 0x47, 0x1000001}, 0xfffffffffffffdee) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) futex(&(0x7f0000000580)=0x1, 0x7, 0xfffffffffffffffc, 0x0, &(0x7f0000000540)=0x1, 0x0) 10:26:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x400, 0x4) fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f0000000000)="0100000000dd050000071280", 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="e0000001ac1414bb0100000004000000e0ab38e6147e61f103999964c6f4ae5574df9204db8e61fbcf00c78f6af84bee4bc38200acab655981384371c9304dae7904c461aa5a43e30c5263a34f418c660580b9f4959f4149478b95fc933ad37d91547d56ae7c508c0d2c1aba8359c7116a57e4f43ae4df9a00dc606ac2d749c5e46c2ab1290795e9c3a8b1be05258f7e304621a06b646b9b50c5f0c0abd3267fde40a342258fb86c48944ad46bd7d23803ed6439590331344b025f9a0b4bb83a6000e569b73bcc00a9fa36560b64715340f99b08721f47946c3a275d7362380e00000000000000"], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) [ 362.374730] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.393638] RSP: 002b:00007f9a60efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.396401] 9pnet: Insufficient options for proto=fd [ 362.401352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 362.401361] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 362.401369] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.401377] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a60eff6d4 [ 362.401385] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 362.437423] Mem-Info: [ 362.446163] active_anon:191317 inactive_anon:214 isolated_anon:0 [ 362.446163] active_file:8374 inactive_file:42825 isolated_file:0 [ 362.446163] unevictable:0 dirty:124 writeback:0 unstable:0 [ 362.446163] slab_reclaimable:14811 slab_unreclaimable:99741 [ 362.446163] mapped:59238 shmem:373 pagetables:2157 bounce:0 [ 362.446163] free:1171296 free_pcp:525 free_cma:0 10:26:34 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x400000000001) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x19) gettid() r3 = dup2(r2, r1) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r4, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 362.539227] Node 0 active_anon:769528kB inactive_anon:848kB active_file:33356kB inactive_file:171316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236892kB dirty:688kB writeback:0kB shmem:1492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 620544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 362.661580] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 362.705408] validate_nla: 54 callbacks suppressed 10:26:34 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000140)=0xffff, 0xfffffffffffffea0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 362.705418] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 362.744083] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 10:26:34 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000140)) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="3e65616e73ddf59dd16f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 362.812643] lowmem_reserve[]: 0 2555 2557 2557 10:26:34 executing program 5: socket$inet(0x10, 0x2, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r5 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r5, r4, 0x0, 0x2000005) read(0xffffffffffffffff, &(0x7f00000005c0)=""/193, 0xc1) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r7, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r7, &(0x7f0000000040), 0x8000fffffffe) getsockopt$sock_buf(r8, 0x1, 0x10000000000001e, &(0x7f0000000380)=""/87, &(0x7f00000006c0)=0x9) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) r10 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r11, &(0x7f0000000200)=""/250, 0x50c7e3e3) poll(&(0x7f00000001c0)=[{r0, 0x80}, {r9, 0x1201}, {r10, 0x881}, {r11, 0x10}, {}, {0xffffffffffffffff, 0x80}], 0x6, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x180) syz_open_procfs(0x0, 0x0) [ 362.833748] Node 0 DMA32 free:847444kB min:36248kB low:45308kB high:54368kB active_anon:802340kB inactive_anon:848kB active_file:33356kB inactive_file:171316kB unevictable:0kB writepending:688kB present:3129332kB managed:2619976kB mlocked:0kB kernel_stack:9216kB pagetables:8884kB bounce:0kB free_pcp:1968kB local_pcp:640kB free_cma:0kB 10:26:34 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) recvmmsg(r3, &(0x7f0000004e00)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=""/26, 0x1a}, 0x1}, {{&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f00000004c0)=""/123, 0x7b}], 0x2, &(0x7f0000000740)=""/145, 0x91}, 0x192d}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000005080)=""/89, 0xfffffe19}, {&(0x7f0000001a00)=""/195, 0xc3}, {&(0x7f0000000580)=""/46, 0x2e}], 0x5, &(0x7f0000001b80)=""/149, 0x95}, 0x9}, {{&(0x7f0000001c40)=@alg, 0x80, &(0x7f0000003340)=[{&(0x7f0000001cc0)=""/60, 0x3c}, {&(0x7f0000001d00)=""/218, 0xda}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/84, 0x54}, {&(0x7f0000002e80)=""/173, 0xad}, {&(0x7f0000002f40)=""/234, 0xea}, {&(0x7f0000003040)=""/225, 0xe1}, {&(0x7f0000003140)=""/97, 0x61}, {&(0x7f00000031c0)=""/74, 0x4a}, {&(0x7f0000003240)=""/243, 0xf3}], 0xa, &(0x7f0000003400)=""/236, 0xec}, 0x40}, {{&(0x7f0000003500)=@caif=@util, 0x80, &(0x7f0000003780)=[{&(0x7f0000003580)=""/6, 0x6}, {&(0x7f00000035c0)=""/4, 0x4}, {&(0x7f0000004fc0)=""/136, 0x88}, {&(0x7f00000036c0)=""/183, 0xb7}], 0x4, &(0x7f00000037c0)}, 0x9}, {{&(0x7f0000003800)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000003880)=""/45, 0x2d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/127, 0x7f}, {&(0x7f0000004940)=""/182, 0xb6}, {&(0x7f0000004a00)=""/196, 0xc4}], 0x5, &(0x7f0000004b80)=""/38, 0x26}, 0x9}, {{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000004bc0)=""/115, 0x73}, {&(0x7f0000004c40)=""/184, 0xb8}, {&(0x7f0000004d00)=""/32, 0x20}], 0x3, &(0x7f0000004d80)=""/75, 0x4b}, 0x10001}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000600)={{0x1000, 0xf3be3e2aab093ab7, 0x6, 0x6, 0x1, 0x3f, 0x1, 0x9, 0x3f, 0x6, 0xd7, 0xff}, {0x4000, 0x4, 0xf, 0x56, 0x4, 0x20, 0xff, 0x2, 0xe6, 0x6, 0x5, 0x4}, {0x3000, 0x2, 0x0, 0x4, 0x3, 0x1, 0x1, 0x1, 0x20, 0x0, 0xda, 0x4}, {0x6000, 0xf000, 0x0, 0xf6, 0xe9, 0x1, 0x4, 0x4, 0x61, 0x5, 0x20, 0xf7}, {0xf000, 0x10000, 0x0, 0x8, 0x2, 0x4, 0x6, 0x40, 0x6, 0xdf, 0xff, 0x4d}, {0x1, 0x1000, 0xe, 0x4, 0xb4, 0xf6, 0x3, 0x1, 0x8a, 0x8, 0x1, 0x9}, {0x2, 0x5000, 0xc, 0xff, 0x20, 0x3, 0x0, 0x80, 0x6, 0x8, 0x6, 0x81}, {0x4, 0xd000, 0xd, 0x5e, 0x4, 0xab, 0x45, 0x1f, 0xff, 0x8, 0x5, 0xf7}, {0x10000, 0x100000}, {0x6000, 0x2}, 0x80000000, 0x0, 0x10000, 0x24211, 0x4, 0x8000, 0x3000, [0x5, 0x7, 0x76, 0x5d6d]}) [ 362.951299] lowmem_reserve[]: 0 0 2 2 [ 362.960299] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.013680] lowmem_reserve[]: 0 0 0 0 [ 363.017697] Node 1 Normal free:3784064kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.067037] lowmem_reserve[]: 0 0 0 0 [ 363.075100] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 363.094706] Node 0 DMA32: 5276*4kB (UME) 2262*8kB (UME) 4334*16kB (UME) 2177*32kB (UME) 903*64kB (UM) 327*128kB (UME) 101*256kB (UE) 76*512kB (UME) 47*1024kB (UM) 29*2048kB (UME) 92*4096kB (UM) = 826976kB [ 363.123628] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 363.142045] Node 1 Normal: 62*4kB (U) 251*8kB (UE) 279*16kB (UE) 66*32kB (UME) 18*64kB (UME) 9*128kB (U) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784064kB [ 363.164314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.173679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 363.188520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.197819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 363.216645] 51851 total pagecache pages 10:26:35 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffffffffffffb) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) creat(0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:26:35 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 363.222994] 0 pages in swap cache [ 363.226757] Swap cache stats: add 0, delete 0, find 0/0 [ 363.236777] Free swap = 0kB [ 363.240022] Total swap = 0kB [ 363.243199] 1965979 pages RAM [ 363.246436] 0 pages HighMem/MovableOnly [ 363.250657] 338855 pages reserved [ 363.254239] 0 pages cma reserved [ 363.336147] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 363.348055] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 363.353692] CPU: 1 PID: 14875 Comm: syz-executor.0 Not tainted 4.19.82 #0 [ 363.360629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.369983] Call Trace: [ 363.372592] dump_stack+0x172/0x1f0 [ 363.376238] warn_alloc.cold+0x7b/0x173 [ 363.380227] ? zone_watermark_ok_safe+0x260/0x260 [ 363.385084] ? lock_downgrade+0x880/0x880 [ 363.389250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.394794] ? avc_has_perm+0x404/0x610 [ 363.398785] __vmalloc_node_range+0x486/0x790 [ 363.403292] ? sel_write_load+0x1de/0x470 [ 363.407456] vmalloc+0x6b/0x90 [ 363.410655] ? sel_write_load+0x1de/0x470 [ 363.414819] sel_write_load+0x1de/0x470 [ 363.418801] __vfs_write+0x114/0x810 [ 363.422523] ? sel_make_policy_nodes+0x1520/0x1520 [ 363.427475] ? kernel_read+0x120/0x120 [ 363.431379] ? __lock_is_held+0xb6/0x140 [ 363.435467] ? rcu_read_lock_sched_held+0x110/0x130 [ 363.440492] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 363.445251] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.450798] ? __sb_start_write+0x1a9/0x360 [ 363.455131] vfs_write+0x20c/0x560 [ 363.458690] ksys_write+0x14f/0x2d0 [ 363.462325] ? __ia32_sys_read+0xb0/0xb0 [ 363.466399] ? do_syscall_64+0x26/0x620 [ 363.470379] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.475748] ? do_syscall_64+0x26/0x620 [ 363.479734] __x64_sys_write+0x73/0xb0 [ 363.483628] do_syscall_64+0xfd/0x620 [ 363.487441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.492637] RIP: 0033:0x45a219 [ 363.495835] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.514741] RSP: 002b:00007f9a60efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.522463] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 363.529734] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 363.537009] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 363.544278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a60eff6d4 [ 363.551549] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff 10:26:35 executing program 2: socket$inet(0x10, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip6_tables_targets\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) capset(0x0, &(0x7f00000004c0)={0x0, 0x4000000, 0xfffffefe, 0x0, 0x8}) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0xffffffffffffff66) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xffffffff}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000700)=""/248, 0xf8) creat(&(0x7f0000000480)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r2 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r2, r1, 0x0, 0x2000005) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='.Ccgroup.\xff\x01\x00\x00\x00\x00\x00\x00\x01<\x11#v\xb9^', 0x200002, 0x0) creat(0x0, 0xa4) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x530e, 0x2000001d) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$loop(0x0, 0x0, 0x0) r4 = dup(r3) ioctl$KDSIGACCEPT(r4, 0x530e, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) [ 363.580146] Mem-Info: [ 363.583872] active_anon:208928 inactive_anon:3132 isolated_anon:0 [ 363.583872] active_file:8374 inactive_file:42835 isolated_file:0 [ 363.583872] unevictable:0 dirty:190 writeback:0 unstable:0 [ 363.583872] slab_reclaimable:14776 slab_unreclaimable:101735 [ 363.583872] mapped:59223 shmem:3295 pagetables:2280 bounce:0 [ 363.583872] free:1148442 free_pcp:622 free_cma:0 10:26:35 executing program 3: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x800, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x78c26887466e1cf7) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, 't\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00'}], 0xa, "027f553e749b025ae3a3996bc67986cde872b261738c9322f618c22ec65806e743ae117b475053c5f1520d0dee26fe4eaf4f023cef205cc835671f4f87c4f4316628e3a2fe21974219ce25e71e9b82e4233c7778ec292c01"}, 0x74) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x50, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000380)=""/169) r2 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x800, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r5, r4, 0x0, 0x841) fchdir(r4) fchdir(r3) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYRES32], 0xc) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendfile(r6, r6, &(0x7f0000000180), 0x8000) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) memfd_create(0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000280)) [ 363.689143] Node 0 active_anon:821424kB inactive_anon:16528kB active_file:33356kB inactive_file:171340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236892kB dirty:760kB writeback:0kB shmem:17180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 363.727269] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 363.764359] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.811215] lowmem_reserve[]: 0 2555 2557 2557 [ 363.815995] Node 0 DMA32 free:820828kB min:36248kB low:45308kB high:54368kB active_anon:807116kB inactive_anon:8628kB active_file:33356kB inactive_file:171340kB unevictable:0kB writepending:760kB present:3129332kB managed:2619976kB mlocked:0kB kernel_stack:8960kB pagetables:8972kB bounce:0kB free_pcp:2840kB local_pcp:1400kB free_cma:0kB [ 363.846327] lowmem_reserve[]: 0 0 2 2 10:26:35 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001780)=""/109) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) dup(0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, 0x15, 0x100000000401, 0x0, 0x0, {0x100000000a}, [@nested={0x2, 0x0, [@typed={0x14, 0x2, @binary="b8e02709575f96896413dba537"}]}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, 0x15, 0x100000000401, 0x0, 0x0, {0x100000000a}, [@nested={0x2, 0x0, [@typed={0x14, 0x2, @binary="b8e02709575f96896413dba537"}]}]}, 0x2c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001500010400000000000000000a00000402000200b8e02709575f96896413dba53700000057e06af48cf56dbe7f7fc1087bb493cb1ff0038329b18a16ba3c2bbfe27a688d62aee550f25f4807cd9cb3ba9fec6985ba7facdf7f60e6b3f9319eb0c29582626a1bb925dd3ab442ab883b4df47134d01660b9877106d13f60cea814b5a59dc4808bf01711148aa57c9b24e0f1a26a88ea3521a255ed60314e23b05a8cb291d40341581ebd9d80d363ed260fa0513940900927affd1d5fddf5eeacbc0ce87a54ca704c222f7a715b92c81ff77d3aaa143202f0f25c9150a4af4a7b16d108b81a521fe86800d430713a462e149da82299"], 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000015000104000000000000b8e02709575f96890213dba537000000"], 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, 0x15, 0x100000000401, 0x0, 0x0, {0x100000000a}, [@nested={0x2, 0x0, [@typed={0x14, 0x2, @binary="b8e02709575f96896413dba537"}]}]}, 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710000300000001ffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710000300000001ffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000080)='./bus\x00', 0x0) r11 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x6100) ftruncate(r11, 0x208200) getgroups(0x3, &(0x7f0000000200)=[0xee01, 0xffffffffffffffff, 0x0]) [ 363.854100] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.880327] lowmem_reserve[]: 0 0 0 0 [ 363.884265] Node 1 Normal free:3784064kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.920267] lowmem_reserve[]: 0 0 0 0 [ 363.924122] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 363.928552] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25700 sclass=netlink_xfrm_socket pig=14890 comm=syz-executor.3 10:26:35 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000080)) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 363.963756] Node 0 DMA32: 5618*4kB (UME) 1391*8kB (UME) 3236*16kB (UME) 2224*32kB (UME) 917*64kB (UM) 328*128kB (UME) 103*256kB (UE) 75*512kB (UME) 48*1024kB (UM) 37*2048kB (UME) 96*4096kB (UM) = 840128kB [ 364.009209] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 364.033379] Node 1 Normal: 62*4kB (U) 251*8kB (UE) 279*16kB (UE) 66*32kB (UME) 18*64kB (UME) 9*128kB (U) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784064kB [ 364.055030] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 364.082781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.110134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 364.130646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.151902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 364.172802] 53552 total pagecache pages 10:26:36 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 364.183584] 0 pages in swap cache [ 364.192677] Swap cache stats: add 0, delete 0, find 0/0 [ 364.205881] Free swap = 0kB 10:26:36 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0xfffffffffffffe52, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x328) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) write$P9_RMKNOD(r3, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x80, 0x4, 0x6}}, 0x14) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='o=\x00'/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:36 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f000600000007000000"], 0x20) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 364.243904] Total swap = 0kB [ 364.247051] 1965979 pages RAM [ 364.267850] 0 pages HighMem/MovableOnly [ 364.279318] 338855 pages reserved [ 364.289170] 0 pages cma reserved 10:26:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='\x00o\x00\x00\x00\x00\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 10:26:36 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f000600000007000000"], 0x20) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 364.318390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 364.356044] SELinux: failed to load policy 10:26:36 executing program 5: r0 = socket(0x1, 0x80001, 0x0) getpeername$packet(r0, 0x0, 0x0) 10:26:36 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f000600000007000000"], 0x20) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 364.406179] SELinux: failed to load policy 10:26:36 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9f61) unlink(&(0x7f0000000200)='./file0\x00') clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount$fuseblk(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1f) ftruncate(r0, 0x0) [ 364.485752] SELinux: failed to load policy 10:26:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0x76057a897ec2e199) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) sync() truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x8000) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r5, &(0x7f0000000500)) fstat(r2, &(0x7f0000000640)) 10:26:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x267, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/dev\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) 10:26:36 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00"], 0x30) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:36 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x108) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 364.641487] SELinux: failed to load policy 10:26:36 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00"], 0x30) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 364.669936] ptrace attach of "/root/syz-executor.5"[14938] was attempted by "/root/syz-executor.5"[14942] 10:26:36 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0}}}}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:36 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[]}, 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(r0) creat(0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) unshare(0x200) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') wait4(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f00000005c0)='trusted.overlay.opaque\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000600)="38617344ddf88ef2a971b1c46edd15c3b18211ed90a5ea7e4b8bcbfc564eb493e83d797d2ffd9623461875328e4b1c9cb516f352221a0363ba4afbdf796052cfed2697f0f708b5551cd5e2d0e064f33b49f4d9bb45687275640f9ccac4d44760c9de4640b9dca3b829ab6d74f48ddf0f0ac0773d8d41ab121e2260eba29d65b51641121b3a881ca47431e5e1953f119cbcad00"/157, 0xfffffffffffffed1, r6) request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='&\x00', r6) r7 = add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r7) keyctl$assume_authority(0x10, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000380)) socket$inet6(0xa, 0x10000000001, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f00000014c0), &(0x7f0000001500)=0xc) setns(r5, 0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) pipe(0x0) getgid() [ 364.735864] SELinux: failed to load policy [ 364.990817] IPVS: ftp: loaded support on port[0] = 21 10:26:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x8200, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)) 10:26:37 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00"], 0x30) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:37 executing program 1: mkdir(&(0x7f0000000080)='./file0//ile0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="82f8a0098da2075fec2380d38d19b988b3a3875df71088bafea52f3eacdc34f5cf08ad02f671eeb91b8b3de9703142d7d53df3597f4c34f35e641e3be72cd1af9494626d9297b0a1ee9e2e5f4be0f2fdbebce7fa8af83b707503bc54427428ab240a6b75b4a3c141bc4dcd7e9bb52948352fb8526fbbc1ae78009b4f40f344388ebd9d44eacc750cb9e00aa56c8dd8022e7de384b04858186dc25ecbc3758a6a92d70f4663a1822965abcecf3f490914981b36fe6857b1a48093168603ee62902b89", @ANYRESHEX=r2]) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) write$P9_RSTAT(r3, &(0x7f0000000140)={0x73, 0x7d, 0x2, {0x0, 0x6c, 0x6, 0x7, {0x20, 0x2, 0x7}, 0x5f840000, 0xcd, 0x9, 0x80000000, 0x2a, 'md5sum^systemwlan1cgroup/\\securitysecurity', 0xc, 'md5sum*(?*lo', 0x0, '', 0x3, '9p\x00'}}, 0x73) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) getrandom(&(0x7f0000004100)=""/4096, 0x1000, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000046ada090702000b00637075736574776861"], 0x15) sendfile(r5, r5, 0x0, 0xffffffff80000001) timer_create(0x3, &(0x7f0000000380)={0x0, 0x0, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e4a75", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af05742"}}, &(0x7f00000003c0)=0x0) timer_gettime(r7, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r6, 0x0, 0x8000fffffffe) socket$inet6(0xa, 0x800, 0x1) sendfile(r2, r6, 0x0, 0xa5cc554) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x5, &(0x7f0000001980)=""/200, 0xc8}, 0x7}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001a80)=""/227, 0xe3}, {&(0x7f0000001b80)=""/169, 0xa9}, {&(0x7f0000001c40)=""/173, 0xad}, {&(0x7f0000000900)=""/12, 0xc}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/44, 0x2c}, {&(0x7f0000001e00)=""/142, 0x8e}, {&(0x7f0000001ec0)=""/101, 0x65}], 0x8, &(0x7f0000001f80)=""/130, 0x82}, 0x7fffffff}, {{&(0x7f0000002040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000020c0)=""/122, 0x7a}, {&(0x7f0000002140)=""/46, 0x2e}, {&(0x7f0000002180)=""/82, 0x52}, {&(0x7f0000002200)=""/179, 0xb3}, {&(0x7f00000022c0)=""/72, 0x48}, {&(0x7f0000002340)=""/45, 0x2d}, {&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/27, 0x1b}], 0x8, &(0x7f0000002500)=""/85, 0x55}}, {{&(0x7f0000002580)=@xdp, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/153, 0x99}, {&(0x7f00000026c0)=""/208, 0xd0}], 0x2}, 0x400}, {{&(0x7f0000002800)=@hci, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002880)=""/140, 0x8c}, {&(0x7f0000002940)=""/10, 0xa}, {&(0x7f0000002980)=""/165, 0xa5}, {&(0x7f0000002a40)}, {0x0}, {&(0x7f0000002b00)=""/84, 0x54}, {&(0x7f0000002b80)=""/117, 0x75}], 0x7, &(0x7f0000002c40)=""/26, 0x1a}, 0xb}, {{&(0x7f0000002c80)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/84, 0x54}, {&(0x7f0000003d80)=""/127, 0x7f}, {&(0x7f0000003e00)=""/232, 0xe8}], 0x4, &(0x7f0000003f40)=""/212, 0xd4}, 0x4}], 0x6, 0x2000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) gettid() ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000940)) [ 365.300412] SELinux: failed to load policy 10:26:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x20}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83fe", 0x64}], 0x1) getsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000440), &(0x7f0000000000)=0x93) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, 0x0) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x3fffe, 0x0) mkdirat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x1ff) r3 = memfd_create(&(0x7f0000000680)='./cgroup.cpu/syz1\x00EU\x06\xb5F\x0eQ\x0fGv\tj\xd0Q\x84AZ\xa6\xd6\x8c\xb0\x18!\x1e\xfc\xef\xc7\xce)\v\xdc\x1f\xb6!\xeb\x1bx\xd8{\x19\r\xe3(\x18\x0f\xe9Xy\xd1\x93\xd8\x13\xc4LW\x90%\xf3\x11\x1c\x96\xbb\xe9l7z\xf5\xca\xd7W=u\a\xee.[\xa9\x8e\xeb7>\x1f\x12U\xf5\xed\x99\x9e0\xd6+\xc6\x1a l\x88~\x1a-k\xff\xd3\x19\xdf\x826\a\xb0B?\xadv\xdc\xb2\v\xf4d\xcc\xe5U\xa5\x03K\x93\x0f\xe4\xba\xa3A\xb2\xa0V\xeci\xc2\xd1\x06X\xebu\xa3\r\xdf\xe8\xa0+\x99\xc0\xc5\x9b\xaf\x91=\xc7\xf3\xae\xf5\x8c\xedb\n\xfa\xbc\x9d\xaf\xec\xd3\v\xd7\xb2\xdf:\\\x97W\xae\xee\x88\xadD\xaeZw\xba9\x1d\xaehAO\xf8q\xe7\x86\x96\xc29\x87\x97l&\xdd\xa3', 0x0) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x21, 0x20000004, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @empty, 0x100000000}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./Tg~&\x13\x06F<\xe9\xbf/syZ1\x00', 0x200002, 0x0) fchdir(r3) r5 = creat(&(0x7f0000000380)='./bus\x00', 0x20) fcntl$setstatus(r4, 0x4, 0xc44) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x400000000000) write$selinux_context(r6, &(0x7f0000000480)='s\xd6\xd0\x92ystem_u:object_r:crontab_exec_t:s0\x00', 0x27) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='dctcp-reno\x00', 0xb) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r0, 0x5462, &(0x7f00000002c0)) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r5, &(0x7f0000000600)="b2cf791ae07fcba019ebbd2764b345fa475d494fbe60cf259fd297b6a2fdd1ea01970074f98d272cf8d67d88f966abb43192f5914c3a07cc27be2b22f5fffb76de823d144210", 0x46) select(0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x0, 0x401}, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0x40, 0x1}, &(0x7f0000000280)={0x0, 0x2710}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]) listen(r1, 0x81) open(&(0x7f00000003c0)='./bus\x00', 0xa00, 0x10) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x4000000000001a, &(0x7f0000000080)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 10:26:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="bd", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x11, 0x0, 0x27) 10:26:37 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x42640) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}}, 0xa0) write$FUSE_BMAP(r3, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x4}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x1, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000140)={0x20, 0x0, 0x1, {0x0, 0x1}}, 0x20) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:37 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f000200000001000000"], 0x38) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000140)=0x8, 0xd94cf415) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000040)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 10:26:37 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f000200000001000000"], 0x38) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 365.486288] SELinux: failed to load policy 10:26:37 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) write$cgroup_int(r0, &(0x7f0000000140)=0xffffffff7fffffff, 0xfffffffffffffec5) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) lseek(r0, 0x0, 0x3) fchdir(r2) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./bus\x00', 0x6, 0x2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r7 = geteuid() r8 = creat(&(0x7f0000000400)='./bus\x00', 0x40) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = getuid() r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x1b, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x40000002, 0x0, 0x1}, 0x20) close(r11) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000300)=0xe8) mount$fuse(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='fuse\x00', 0x400, &(0x7f00000005c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@default_permissions='default_permissions'}], [{@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@obj_role={'obj_role', 0x3d, 'eth1&!'}}, {@measure='measure'}, {@uid_gt={'uid>', r10}}, {@uid_eq={'uid', 0x3d, r12}}, {@dont_measure='dont_measure'}]}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r13, r5, 0x0, 0xdd) [ 365.564666] audit: type=1400 audit(1573467997.540:133): avc: denied { write } for pid=15003 comm="syz-executor.5" name="net" dev="proc" ino=59840 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 365.597606] SELinux: failed to load policy 10:26:37 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) r2 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r2, 0x0, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x800}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x5d, 0x0, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000300)={0xf}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006}]}, 0x10) sendto$inet6(r4, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) socket(0x4000e, 0x8000000000004, 0x5) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@loopback, @in6}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'veth0_to_team\x00', 0x3}, 0xffffffffffffff69) socket$netlink(0x10, 0x3, 0x2) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000c00160000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 365.626137] audit: type=1400 audit(1573467997.570:134): avc: denied { add_name } for pid=15003 comm="syz-executor.5" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 10:26:37 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f000200000001000000"], 0x38) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:37 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a"], 0x3c) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:37 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000065ff44fade373d5b7f99dfff0180000008dfb8bd2a8b4ad2422500395032303049483ad13c38fe45f2f2302e4c1f6ea71d5dc90d2227876242542456f417da33780a3f07fc4cbe8ab65cc770ee0f5437cf6f84782301000100000000007f7b728250224a52f07ebffcddc9a36b1c01eb64b069664b4ff7b39286aee1"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x0, 0x4000000000000000, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10}}}}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = getpgid(0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)="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", 0x1ca) sendfile(r6, r7, 0x0, 0x7fffffa7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r5, r6, 0x0, 0xa, &(0x7f00000002c0)='/dev/zero\x00', r8}, 0x30) r9 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x1ca) sendfile(r4, r9, 0x0, 0x7fffffa7) perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x70, 0x1f, 0x0, 0x8, 0x1, 0x0, 0x7, 0x100, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x4, 0x2, 0x8, 0x1, 0x5, 0x2bad}, r3, 0x9, r4, 0x6) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000280)={0x1a, 0x10, 0x8, 0xc7e, "518f52a4fe8cda2c2cc46908b95858bc0576d23ff931b3bdfb401ed1d53e92b5"}) [ 365.728798] audit: type=1400 audit(1573467997.570:135): avc: denied { create } for pid=15003 comm="syz-executor.5" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 365.752111] SELinux: failed to load policy [ 365.785190] audit: type=1804 audit(1573467997.580:136): pid=15005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir511774849/syzkaller.EHKBOV/508/bus" dev="sda1" ino=16786 res=1 [ 365.823557] SELinux: failed to load policy 10:26:37 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a"], 0x3c) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 366.019138] protocol 88fb is buggy, dev hsr_slave_0 [ 366.024331] protocol 88fb is buggy, dev hsr_slave_1 [ 366.234910] audit: type=1804 audit(1573467998.210:137): pid=15023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir511774849/syzkaller.EHKBOV/508/bus" dev="sda1" ino=16786 res=1 [ 366.365940] audit: type=1804 audit(1573467998.340:138): pid=15013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir511774849/syzkaller.EHKBOV/508/bus" dev="sda1" ino=16786 res=1 10:26:38 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x7f, 0x200, 0x9, 0x8, 0x7fff}) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:38 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a"], 0x3c) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) 10:26:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f00000000c0)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000640), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 10:26:38 executing program 3: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4000, 0x100) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x74) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0xd48f1f8357fa1f19) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r3 = dup2(r2, r2) write$P9_RREADDIR(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x49) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000200), 0x0) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0x1, 0x3}, 0xa) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0)=0x5, 0x4) ioctl(r1, 0x4, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet6(r4, &(0x7f0000807fe4)={0xa, 0x4e26, 0x0, @rand_addr="d2641e680e3a9c5e0000000100"}, 0xfffffdbd) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r6, &(0x7f0000000100)=""/35, 0x23) getdents(r6, &(0x7f0000000000)=""/47, 0x2f) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) r7 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x2, 0xfffffffe}) recvfrom$inet6(r6, &(0x7f0000000700)=""/111, 0xfffffffffffffca0, 0x1, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x1b}, 0x3}, 0x1c) r9 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r9) r10 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r9) r11 = request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='icmp\x00', r10) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000003c0)={'eql\x00', {0x2, 0x4e21, @multicast2}}) keyctl$invalidate(0x15, r11) sendto$inet(r0, 0x0, 0x198, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000280)="b5397c99066b47670a406d6362b7daa39ded4412aeac2d377a038a04fce75fa8278d5b655a23652c3f8bc159c8c8669e928174bc7a258261e1da4f513f24fa02023f29ccb7", 0xffffffffffffffa7, 0x40, 0x0, 0x2df) 10:26:38 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) r8 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0) getsockname(r9, &(0x7f00000001c0)=@rc, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r10, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @timestamp], 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@empty}, 0x14) ftruncate(r11, 0x2007fff) sendfile(r5, r11, 0x0, 0x8000fffffffe) [ 366.516313] audit: type=1804 audit(1573467998.490:139): pid=15023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir511774849/syzkaller.EHKBOV/508/bus" dev="sda1" ino=16786 res=1 10:26:38 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @loopback}, 0x10) r1 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x75, 0x105082) r3 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x1) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000540)="e5da9147a17576a20fd70497d1b7e16f5ac3872d1e42f90c8e95f2159cf5c0302a848ea6331cce78041cb30fa1f72b23cd130ba13a0eaf34886fb1a728cfd22018e39b23419262d9fc1a9bd3876b78e8f4dfe520d309f74bc7255a43451df16f471a274ba9413e58142dba0f3332c4649161ae8c943fe735dc35c7e4c1861a8f28b1d2549c6c389836324e4958c1a42997e732303a99dab34829357548b77cd61eca239d854ecfacce5b8d9280cac09f703cd2d9a1d5e18bb7e25aa29501acffdc7cb91a8460b2e897be78e449b4bfe282bb68", 0xd3}, {&(0x7f0000000c00)="49cf7cc99dae786370aede94c676fd1f12267c080db690686d47d2b41317dcf734cbe4d5fbf4eea138398129ed571204c985936ae61c1965435c18b4da8f667e39665e933bca165c4165c9e1f3c17e07f61f247fd3d91b5e5ba73be11dc0e7b096392a9981be3c3f9c9f7f466c46d3bc7a3704b4ba6179d104a3528cdf0bdebc6a515d07a7e47e99e5a7c00f01551b389aff9d646349c81bd05bce329367ef6ff1161b9ef9f4801273f69b34704ad44c8451df9e5a063cdffa7a45de6595d88f3462b0557a9964156f459c6c592c869be37b61a0569db1b7", 0xd8}, {&(0x7f0000000d00)="fdce9b2bd182dc08a5f01195ccf1a9b4b19088ece7f80f127ad239c76166ba34188c2bdfd8df9f2cbb77d5f642eb2742ee5fdcb684fb505b9af7ec932d422f7cadcd38001d63dbf14dc10508147a871167699a8b140269d5ba833e63e82414378e01f57d879bc992c1ee7e178129694126dcbda1aa86647e3587e90261703b94662a615430517712425d52e5c069314490b243bb7bcc64ecb2c6328b6a45d022a14302a6840b7641f86ba20650a5e97de3d48180545f7929", 0xb8}, {&(0x7f0000000dc0)="9c60093f6a483d1f9715452895907a003e884cfbe05dd8c683bde7f533cfad9bebab364009a7d6aa5883800dc1904682d50fff125de001a7283a69317c4b280205ddfd6424818d2c357de7aba0bbe49bbba2266fa0df4878dd69299709c3b424435a31820b623d25c7d41dd445da5f94c0e2f18e6c076c2898", 0x79}, {&(0x7f00000001c0)="d27b05d0969a6b820e751e99769137437a91103fa30f", 0x16}, {&(0x7f0000000e40)="a04b5287cfc932367edf42cfc9b3ebc3e3400a706ca0b94b2f5c19400fe80091f1a88555307032880ba63733d764ab25a97dc295ea7a032d1be4004c73104fcf5bdd28816756cd7f1ff9eebb53073ce657a88f3bef46b039e8a6b5d3c4a4c7f90ff8560670099fe1281585074aadbe9e58723affb9babd0c642cb5d5ddc6d2215e09bc278e3469a76869965e9a3087dcfd1dc0771af7128fb48de9db874bb58775edaa67d3bb84c17cf1bf54dab2529f3debdf64938cc7392430a79bea84be7426d6a865d07c85100405acb78cfef5a1344637e7ce80453503b73537b750cdb77cac11724c26fc739fe09c74ba5c376cd29d45b8cc7a216b4c", 0xf9}, {&(0x7f0000000f40)="06df08ee67a1a4355a0c99e4d02fc1f6cb95bd5fc83c76230aabd2d7278f740ec073679c546c2df1687bb3331e69247aa6ca1c181d1c885e35cf9dedffe09c791efea69984863347903bd69d2408772e8fa28dfc9d93dd46e442471a4025020336da19a34ff233a43d581c6abc260a9df7d8db55fa0576dda1399c60cfa72d0731b4eee47a1514e5861e39f2944d2f1746195a384bc05eec790546ac05bb4f56c8cb74178e40d93b437ee3c456e6185421586e56ca78942e724afc7d2d1ef810f9c3303573be6c34c30cb529d89dcc07a52aef06b1466ebeaaf812158b0443350387de527a", 0xe5}], 0x7, 0x80ffd) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) ioprio_get$uid(0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) r7 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0x1001e) r9 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) r10 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r10) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), &(0x7f0000000a40)) r12 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = getegid() setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000a80)={{}, {0x1, 0x1}, [{0x2, 0xde5d4b62f84192e6, r4}, {0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4, r6}, {0x2, 0x6, r7}, {0x2, 0x6, r8}], {0x4, 0x4}, [{0x8, 0x5, r9}, {0x8, 0x2, r10}, {0x8, 0x0, r11}, {0x8, 0x1, r12}, {0x8, 0x4, r13}], {0x10, 0x1}, {0x20, 0x2}}, 0x7c, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000"], &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) r17 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$FIGETBSZ(r17, 0x2, &(0x7f0000000440)) write$cgroup_type(r16, &(0x7f00000009c0)='threaded\x00', 0xd4b9c12) clone(0x2000000000003ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r18, 0x8938, &(0x7f00000000c0)={'ifb0\x02\x00\x00\x00\x00\xff\x00', @ifru_ivalue=0x1}) getsockopt$inet_IP_IPSEC_POLICY(r18, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) sendmsg$nl_generic(r16, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002400000828bd7000ffdbdf250700000008004800", @ANYRES32=r19, @ANYBLOB="f92e9c496e93b14980748e270595f259e7f31ede7f0ba50a", @ANYRES32=r20], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) unlink(&(0x7f0000000680)='./file0\x00') rmdir(&(0x7f0000000140)='./file0\x00') ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000400)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x12}) ioctl$TUNSETSNDBUF(r14, 0x400454d4, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000040)=[{r14}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) 10:26:38 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce2"], 0x3e) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 366.644972] ptrace attach of "/root/syz-executor.2"[15062] was attempted by "/root/syz-executor.2"[15063] 10:26:38 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1520000065003950ea00ff076f945a36701948323030012e4c3fbf01273444de564d9c4a010d5b17cfec9b42670c3fb0415ef25a1ddaf3ba941adf4044eafbedbc28"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000004c0)={0x2, @output={0x0, 0x0, {0xfff, 0x8001}, 0x7a27}}) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000340)={{0x2, 0x9}, 'port1\x00', 0xb4, 0x8, 0x4, 0x81, 0x7, 0x4, 0x9d78, 0x0, 0x5, 0xff}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r5, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = getpid() ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000080)=r7) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 366.674710] audit: type=1400 audit(1573467998.650:140): avc: denied { map } for pid=15059 comm="syz-executor.5" path="/dev/loop7" dev="devtmpfs" ino=15087 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 10:26:38 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregs(0x420a, r1, 0x8, &(0x7f0000000040)=""/38) 10:26:38 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce2"], 0x3e) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 366.828871] ptrace attach of "/root/syz-executor.3"[7598] was attempted by "/root/syz-executor.3"[15074] 10:26:38 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce2"], 0x3e) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) [ 366.889132] protocol 88fb is buggy, dev hsr_slave_0 [ 366.894274] protocol 88fb is buggy, dev hsr_slave_1 10:26:38 executing program 3: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000100040423dcffdf00", 0x1f) 10:26:39 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 10:26:39 executing program 2: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x502082, 0x152) openat$cgroup_ro(r0, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f00000001c0), 0xbab230cf) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = gettid() rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, 0x0, 0xfffffe43) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) sendmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000580)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1400800000000000fd91d2265eb957ae1e0000003c000000e62a054608000000b75d27ad4c17e28fb2234cb1275e7b33225a88efd49790df847d2d4c26477aeef4736ec99f2a43af01c3d3edd204b93e6075510000009c00000001000000cf0f00000a43b18b492307ce8256c9b25e0ab8ec4f3e4f2606c70e46db517299f6e8c29d1910d0cdfcc6b3de83e929296d83669ecad7ae2de84fd712324bd005b2cfac8566d7bf351411d933fc2ea29cc021349cf20d9726cb3dbfbf8e1f2e2e15d16e992f2ffa66114fdd6e8133576604626c0b064849f61af6f7bcc2908c36d6959a633a0000bc00000015010000f7e0ffff7f56c28f11baa554e7f55443f169788776e38ad86a4efd993ffce547e6e4bd2480a919426ca2ecda81a8a853805148af89a40693b3885672d0955d551e36e49c66a6bf50182f109f2b60b3d81810e2e6d2db9121a3b9b7cd76e10fac7914b59a04af563765389ca786b6eaf0ac629c06fda73f00007659567ddc36690fdf0ba2ff893121bbae84bdd378e909da38a0094851d6f804e782c977a2898f44b3d8b8540130dc1b5976f9905161a580003c0000000000000000"], 0x1a8}}, {{&(0x7f00000009c0)=@llc={0x1a, 0x7, 0x4c3, 0x2, 0x4f98db520000000, 0x1, @random="5f54c77a9fd3"}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000a40)="85b36f10dcb1a33832e3fb4892757d3cba4e3238c324c9596ee9695cd44d6b1098180799725bcc834ebcbc65f6b2ce8abec4cd3088b19540d628a9774fdb3190f30c6985b7d556c2514a5bb87cb35ebad5200df1840211fefa78f409526456", 0x5f}], 0x1, &(0x7f0000000d00)=ANY=[]}}], 0x2, 0x20004000) r7 = getuid() sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) pipe(&(0x7f0000000540)) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x100) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000380)={0x3, 0x9, 0x6, 0xffff}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)=""/105, &(0x7f00000001c0)=0x69) setuid(r7) 10:26:39 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, 0x0, 0x0) 10:26:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000052001f0014f9f407000904000a00071008000100feffffff0800000000000000", 0x24) 10:26:39 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x80800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={r5}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000280)={r5, 0x8, 0x30}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x3ff, 0x4}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r6, 0x74d9}, &(0x7f0000000280)=0x8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x100, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) [ 367.407172] SELinux: unknown common [ 367.418687] 9pnet: Insufficient options for proto=fd 10:26:39 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffffffffff7f, 0x200401c8, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 10:26:39 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, 0x0, 0x0) 10:26:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev, 0x2}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x80010000}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) socketpair(0x5, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0xd}, 0xf}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYRES16, @ANYRES16=r7, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="10002bbd7000ffdbdf25090000000800040001000004"], 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4001) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x200005, 0x0) close(r0) 10:26:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_eeprom={0x43}}) 10:26:39 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c, 0x5, 0x0, {0x0, 0x5}}, 0xed) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) syncfs(r4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 367.702634] audit: type=1800 audit(1573467999.680:141): pid=15065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16882 res=0 [ 367.762153] SELinux: unknown common 10:26:39 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000100000000fb6c7a2ce29a"], 0x305) readv(0xffffffffffffffff, 0x0, 0x0) 10:26:39 executing program 5: openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f00000008c0)=@nl=@proc, 0x80, &(0x7f0000002000)=[{0x0, 0xfffffffffffffd9d}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0)=0x3, 0x4) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x15acc76c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4}}}], 0x20}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x80000000}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) socket$inet6(0xa, 0x2, 0x0) 10:26:39 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000007eb3950323030302e4c"], 0x15) r2 = dup(r1) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000080)={0x40002009}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d6e074c16496dc75c8476b39a4a71ad4f9b59d726d8265aef4bf9bcc807a26fa08c3bd806921d593f28005eaa478854737aed7833f6d0c0edc325ff1459629bb6df31fae71524c4be53c725287118a56a84c5ba9e81c0c3bf6164785b81ca608fe5ab425f6058b2151f10866923ff7a9b162118", @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 367.903448] SELinux: unknown common [ 368.099168] protocol 88fb is buggy, dev hsr_slave_0 [ 368.104378] protocol 88fb is buggy, dev hsr_slave_1 10:26:40 executing program 2: unshare(0x400) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10:26:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) ftruncate(r1, 0x48280) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x0, 0x4000002}}, 0x14) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 368.202633] 9pnet: Insufficient options for proto=fd [ 368.218508] 9pnet: Insufficient options for proto=fd 10:26:40 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="3501002e4c00"/21], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) munlockall() r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000140)={{0x1, 0x2, 0x8000, 0x2, 0x7e0}, 0x2, 0x80000000}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getdents(r2, &(0x7f00000004c0)=""/212, 0xd4) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x80000000, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xfffffffffffffff7}, 0x8) close(r1) 10:26:40 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000340)={0x1ff, 0x2, 0x1}) dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000380)=""/161) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='com.apple.FinderInfo\x00', &(0x7f00000002c0)=""/67, 0x43) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000440)) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000100)={0x1fe}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) prctl$PR_GET_KEEPCAPS(0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r6, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x8001) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) fchmod(r8, 0xc0) poll(&(0x7f0000000480)=[{r7, 0x4821}, {r8}, {r6, 0xf564}, {r1, 0x8000}], 0x4, 0x80) 10:26:40 executing program 1: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 368.409173] protocol 88fb is buggy, dev hsr_slave_0 [ 368.409188] protocol 88fb is buggy, dev hsr_slave_0 [ 368.414266] protocol 88fb is buggy, dev hsr_slave_1 [ 368.419314] protocol 88fb is buggy, dev hsr_slave_1 10:26:40 executing program 3: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x9400) 10:26:40 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f00000009c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mount(&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x38000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r6, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r7, r8+10000000}, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, r5, 0x0) 10:26:40 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x8, 0x848001) recvfrom$ax25(r2, &(0x7f0000000280)=""/88, 0x58, 0x10100, &(0x7f0000000380)={{0x3, @null}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r3, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setfsgid(r6) write$FUSE_ATTR(r3, &(0x7f0000000140)={0x78, 0x0, 0x5, {0xffffffff, 0x7, 0x0, {0x0, 0x2, 0x7, 0x40, 0xe94, 0x8001, 0xfffffffd, 0x6, 0xffff, 0xf7, 0xfffffffa, r4, r6, 0x4, 0x684}}}, 0x78) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:40 executing program 3: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) read(0xffffffffffffffff, 0x0, 0x0) inotify_init() r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}, 0x45c) 10:26:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f0000000100)=@known='user.s\xaf\xff\x93\xe2\f\x0etj\x93\xd9\x06-\xee\xe9yz\x00', 0x0, 0x0, 0x0) 10:26:40 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4c000) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x8000, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x6}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'root'}}, {@audit='audit'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) r6 = creat(0x0, 0x0) mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, r6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r7, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}], 0x2, 0x100000) setsockopt$rose(r6, 0x104, 0xf8769830c576c9a9, &(0x7f0000000100)=0x3, 0x4) r8 = geteuid() r9 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r9, &(0x7f00000002c0)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x210000, &(0x7f0000000700)=ANY=[]) setresuid(r5, r8, 0xee01) [ 368.863574] audit: type=1400 audit(1573468000.840:142): avc: denied { map } for pid=15176 comm="syz-executor.4" path="pipe:[60087]" dev="pipefs" ino=60087 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 [ 369.004903] 9pnet: Insufficient options for proto=fd [ 369.014433] SELinux: security_context_str_to_sid(root) failed for (dev bpf, type bpf) errno=-22 [ 369.037541] 9pnet: Insufficient options for proto=fd [ 369.044982] SELinux: security_context_str_to_sid(root) failed for (dev bpf, type bpf) errno=-22 10:26:41 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RCLUNK(r0, &(0x7f0000000740)={0x7, 0x79, 0x1}, 0x7) 10:26:41 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141242, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000003c00)) r2 = gettid() tkill(r2, 0x15) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) restart_syscall() tkill(r0, 0x1004000000016) 10:26:41 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x9, 0x31aa}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) pipe(&(0x7f0000000000)) syz_open_dev$loop(0x0, 0x3, 0x51d00) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b) io_submit(0x0, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000001400)="70b5b9a4f6fe8eb1a832413ffa4254a19acfadb588c557c43e66f2610bb66a84514748c74b14dad908ff451a91b7c3ee7b420f7582559783c6a4ad20589781f812ca27e37981f8301493520b58c60e0e0e0d647acf9e7c3265236ed5ea57a85f9540ab731684ca4d1749414724a4f5d6d280b9fb8561f3b5b2d112474528817ce13bc33be43762f2c2c7d7120646785a24e50a", 0x93, 0x3ff, 0x0, 0x0, r1}]) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x3) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = inotify_init1(0x800) sendfile(r6, r5, &(0x7f0000000380), 0x5) r7 = socket$inet6(0xa, 0x400000000001, 0x0) r8 = inotify_init1(0x800) sendfile(r8, r7, &(0x7f0000000380), 0x5) dup2(r8, r0) sendfile(r3, r4, 0x0, 0x80000001) r9 = socket$inet6(0xa, 0x400000000001, 0x0) r10 = dup(r9) setsockopt$inet6_tcp_int(r10, 0x6, 0x12, &(0x7f0000000380), 0x1fb) open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip_vs_stats\x00') r11 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r11, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r12 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r12, 0x4, 0x6100) r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r15}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r13, &(0x7f00000003c0)={0x11, 0x0, r15, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) sendfile(r12, r13, 0x0, 0xfffffffffffffffc) sendfile(r12, r13, &(0x7f0000000040), 0x8000fffffffe) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r16 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r16, r16, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r18 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r18, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r18, 0x0, 0x0) r19 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(r19, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r18, 0x8916, &(0x7f00000000c0)={@mcast2, 0x0, r20}) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000000c0)={@mcast2, 0x4e, r20}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r17}) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, r17, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) r21 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r21, 0x4, 0x6100) r22 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r23 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r23, r23, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r23, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(r21, 0x0, 0x2) sendfile(r21, r22, 0x0, 0xfffffffffffffffc) sendfile(r21, r22, &(0x7f0000000040), 0x8000fffffffe) ioctl$LOOP_CLR_FD(r22, 0x4c01) openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x400000, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000600)='-{vmnet1[cpuset\'wlan0${system$\x00\xca\xa4\xce\xf0\xf2a\xc51\xc0Cl\xfep\x84\xf1\x8a\xf4\x1b\xc3~{2\x01g\x11\x80R\x80\xbb\x03\xac \xda\x817\x88\x01Y^>\x1c\xb8\xc5\xcaw\xc5\xab\xa3x\x90>\x86qW\xa8\xb7\xdb\xa1\xd6xS\xb2:\x87\x12\x03\xafV\x85\xc4\x0e~\x89\x18\x86\xd4\xd2\xc1\x00\xda\x9b.', 0x71, 0x2) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000780)=""/114) 10:26:41 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x800) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000280)=""/175) write$P9_RVERSION(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="150000003958323030301b032ee13bad9af9b19a3e1141ee57fe764ce55982b91a0a96"], 0x15) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000140)={0xa0, 0x0, 0x8000000000000000, {{0x0, 0x100000000000, 0x0, 0x0, 0x3, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0xffffffffffffffe2, 0xffffffffffffffda}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000003c0)=""/4096) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 10:26:41 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='\x15\x00\x00\x80\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x1100082) r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000000000000000000000000000000000000000000000000000000000000000000000000000068aae48e993b786c91ff521404ff27d993217dd99613750b9e74e55fe873f1d42e42d1adcbf6ca67b0858f53ef5d9b69ef98058f00ce638c569f6af92285d361fef6733425d0e32284c6eb4b7778598239206e71cfd6a5abaf29a4307a1f8300efcd6a56b1e658a1fa5d425efb32b542d4971c708ce2c7adc01b4b245bfa51c2db9d40"]}) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000980)="4bfdc2f14fd7b96b09c477388eb213004b6a1f4ffd0397eb61ed9fc1beef3541b25a0c5844dc299771e79f231a4646fd690af8dd6a380e8be6fcafd3bb44e5e6647daa2b6e6cf11a68f9105849a53e2585a24e21cde21443a7a463764c27a08ccecda4730211df03d70c90ee1b2a266c632febe6e87284ae0d3da8cf94327c4b37417c11aca0bdea205a91402d532c6f2d2d8c7a1db456fbf69173b43324a78bb0c29de4e4a05eed2712bc8dde0fd8410b2e7cdd95e0860db1a9cb5a7f914c0ec166"}, {&(0x7f0000000a80)="bab30feb51b89bd19b4cc2aa67743341d54093f27403454bbe425b25868da561e714571a8c1c2505b548f56d337451848d005be2720b83a8a0df8ef725ee53e61db4811c0faac1d5420a3b6027f482d46d395775b49bfecc9302b44e5265e24746b0a2e60bc83afb502d2736bf125d7b4bd23f8d964714ff888e88559fada9402629b1f49bfce6287a48bfc7c35b3554a7df159d1826d5d1d8086af8434db98bb4aeef8a8ba4db075fc996a4929c1f0d6fd4625d613c8248b456cdfb824c0e9d0b162549b55ce08b8e44ce399b93dda2d8b74ac895f0bbddcbb1ef29a31753e475f1d300cb79c9528417de669a72c5c96373"}, {&(0x7f0000000b80)="d559393fd61916212a07b82a9f739be7aedb412ab62a99df5af90d792198bc7e408b7d2169deaa62368efbf4213594dbab3e76f1b7b2fa6b1b24925df6eb14f4bcb68778d8ce6c23bdc4624ab81aeb84ce0612470740bb5c8a1c7fa63b6c3b6c144cfa0bc44afa170453d54a4f67dab697b3601601221e0a374989c2af70b60a1e16fe4944bdebe1df092b8a965118ae77e67dc9ba41d9627fd35c8f14a617c5f567887d3c93bc8ab5aa0c0e12e9da1551b587e4d954d517924abc23a010dd2a4d62cb3ca17bf0b1ebe1fb3606454afc8557c98fb1c0d7f45fb647"}, {&(0x7f0000000f00)="21f88817247175a84ce3c7014a93f22044d8ee3a611cf1369277c5e436f9b899776442c5f1f211e6ac0b0d75d6a9664afdf8c9f08360ab39490107127a3dd9adb043b6430dbe75ee6b15f10799cb6441f34ebf6edfaa90970b36dd544251ef17c6078fde621d7c68759850ffc4f04b1dfdd0829bc55fb9e4fce80053a4e8576ac3b6de4d985e55c9a715847cd733b627bdf407e5e747ce6eb16f4a462816de41dcdefbe271a27126a8abb099319e1ac9fdd33023cc463fb1f15f3364962ce578c423321f865d57b167c8b565f0101130b5c287cbaa92b99dbbb00d8a174566879e75131d48899928a73bfada906dc5871ca56548b2f864d83b020e67"}, {&(0x7f0000000340)="94dc911084df5718075f859ea0dd705d8b981ddeb1916c303d6ca7191ca92aa98f386aadbf136a86e979df315099e4e943241b3f4925bb88b678492a1ae4aa0bc4ab397a12a5da2ea7bc950fa51d916322620d2342d1528caf8afff293df51152cd6e30a9d3a9099b93b238ac1c93424efe340d1e1"}, {&(0x7f0000000e00)="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", 0xfff7}, {&(0x7f00000001c0)="c72c310007c0bb82cd9c532505c3d47460a8ef105c34c3ca82ddacc2c3ae1d85d6c2d10d396af757f10d36"}], 0x1, 0x0, 0xffffff58}, 0x0) setxattr$system_posix_acl(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)='system.posix_acl_default\x00', &(0x7f0000001340)=ANY=[], 0x0, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x4, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da", [0x0, 0x20]}) 10:26:41 executing program 3: unshare(0x400) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_BMAP(r0, 0x0, 0x0) 10:26:41 executing program 4: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffffffffffe94) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="105cdcf349fa12aad7d7a2d2403368a108384df8c0de42cd03275426bf0eefd2b449207a41aa33a9515d59af6c80b7ab0bd4c171f2929da76348cf6713350c4885e2fdac65f6b3831d436aafcdcd6bd3e0a0995fa01251503fa137bd5818f1423c3f174fcabcbb1bad600d9be4b60a631cfdee05896b83a411db74b68969c5857fe914905b00"/147], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x810803f9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)) r3 = getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)) wait4(r3, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000000000000000e7ff0700120000000300000000000006000000000000000000000000000000e0"], 0x2e}}, 0x0) ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) write(r6, &(0x7f00000001c0), 0xfffffef3) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r4) creat(&(0x7f0000000300)='./file0\x00', 0x84) 10:26:41 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$P9_RVERSION(r2, &(0x7f0000000380)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getpeername(0xffffffffffffffff, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x80) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r9 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r9, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r10, r9, 0x0) r11 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r11, 0x1) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r12, r11, 0x0) r13 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r13, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r13, 0x1) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r14, r13, 0x0) r15 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r15, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r15, 0x1) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r16, r15, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r15], @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35b08ff338832ca84b13a719c053724c5666747ea7723ef96ff4508ed4fcff49b3ce469c2a538e65fc994c45b"], 0x5}}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="28000000002000000000000000000000006336c25bb23c000000", @ANYRES32, @ANYBLOB="000000000000000008000a00100000003bca18d9d76f33da4808fec2807affc6b34a0f0ea1ee96c84cf9a31f20b629248c791b996dfc949f14e41ca9513a7e4993bedfb753c406453e84bac1bd0f612a6a065eb4d145189b3cb01e4516c172ebd5168142627a74e67af3ec319c1b0e4b2226ea998654731041d2aa1251378fb299262594868910e26ce35cb0f332d26525c899ee00c153a7c17547efefc121ca6ac92df9c389f8b02edea5fa2b389f991c62aec8d8d69c0f18896cae6527272307e152ca9437e06c5d2c0000000000ec00000000000000"], 0x28}}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080026bd7000fedbdf250300000008000600ac1414bb08000b00", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04000500140007000000000000000000000000000000000014000900fe8000000000000000000000000000aa04000500"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:41 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003380)=""/123, 0x7b}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 10:26:41 executing program 5: r0 = syz_open_procfs(0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) set_robust_list(0x0, 0xffffffffffffff74) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="0fa90371868e4087ebd9c2a9b12c", 0xe}, {0x0}, {&(0x7f00000004c0)="1ce08597e413213fad5c1a59a44ae736aaadf6e70bf947c483a3322f0acb48caf8e06b93b3bccbc045d19e4cedb87493d9732fbaba393cddb1d3c5d042b01f", 0x3f}, {&(0x7f0000001680)}, {0x0}, {&(0x7f0000000580)="5911d63cc1bc7299882840c7f9df5823b7f354c05b6b851f4b043f9108fc8b1d5ad8598403d692e17219ef293086a49581116de0de5132595721592ff94146d9181b0a96f766bb790aaa652279cd8bd45b4b9a7a4e31def799ae7f2b", 0x5c}], 0x6, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, 0x0, r1) connect(0xffffffffffffffff, 0x0, 0xd413a8e7e4fd9693) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0xc15ac82d3cb7c18b, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000952000/0x1000)=nil, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/243) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0xfffffffffffffffc, 0x48, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) fchdir(0xffffffffffffffff) 10:26:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~IyM\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xecM.\x8dD<\x82\xfc45\xbe\xd4\xde]i@\x9ax\x1c\x86>\x0f\xd8\xa6\xf8h\x92[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\x1a,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xcf\x81i0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4Nc\xe1\x16\n\xf1\xac\xf4]\xb1\xcd\xf4\xbc\xbb\xed\xe7\x95\xdby\x8ca\xdba\xe2?') r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) 10:26:41 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RCLUNK(r0, &(0x7f0000000740)={0x7, 0x79, 0x1}, 0x7) [ 369.943980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pig=15255 comm=syz-executor.1 [ 369.976883] IPVS: ftp: loaded support on port[0] = 21 [ 369.992857] ¹á6›Íaï~IyMá‡ì: renamed from nr0 10:26:42 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}) write$FUSE_LSEEK(r1, &(0x7f0000000000)={0x18}, 0xfffffffffffffe83) lseek(r1, 0x0, 0x4) 10:26:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000700)=ANY=[@ANYRES32], 0x1, 0x7) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r4 = getpid() r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1b, 0x18, 0x9, 0x7, 0xcb, "7cc5b7207591a62d2ed55687f5aaef17840b55a4a3a0e1a3d976adf0b7b77e823eb7f241e430a484355e66871209a060348086c2e2a94ba7d3a05c2e1be3da878de10fc678701af0789b34079cf8d2571376b2d00380c20bb03c8a32b1730d49e205318a7dd04cbc804eb56208422a00a20a1fa3956b1c19cceca88d10249fbbc3018926b10ef32e6ddf3c182fbd0b2ca7f0a1c73143fdc266b83b0d45f2de150a4032f586ef4f9df282da50f59263f73335cb492f4aefe06da4bac49c8323aa82682318ac57a4ab38c59f"}]}, 0xe8}}, 0x0) prlimit64(r4, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000002480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r1, 0xc0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(r6, &(0x7f0000000600), 0xffffffffffffff9e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r4, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) 10:26:42 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0x6, 0xffffffff, 0x7d42, 0x4, 0x2, 0x6, 0x8, 0x8, 0x5e7e, 0x0, 0x3, 0x5, 0x431, 0x7, 0x9, 0x7, 0xf4a7, 0x9, 0x8, 0x4, 0x8, 0x0, 0xb9, 0x81, 0x8, 0x4, 0x7ff, 0x1, 0x286e, 0x1f, 0x1, 0x200]}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 10:26:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/240) write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 370.202688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pig=15255 comm=syz-executor.1 10:26:42 executing program 5: r0 = eventfd(0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000002c0), 0x4) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r5 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r6) getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fsync(r5) pipe(&(0x7f0000000500)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r7) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) r8 = socket$inet6(0xa, 0x80000, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r8, &(0x7f0000007e00), 0x40000000000025d, 0x0) 10:26:42 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)={0xfffffffffffffcb2, 0x65, 0xffff, 0x8002, 0x8, '9P2000.u'}, 0xfecc) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) socket$packet(0x11, 0x0, 0x300) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0xac}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2e}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}]}, 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x80) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 370.473113] IPVS: ftp: loaded support on port[0] = 21 [ 370.691763] IPVS: ftp: loaded support on port[0] = 21 10:26:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @broadcast}, 'sit0\x00\x00\x00\x00\x00\x00\x10\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback=0x7f000005}, {0x4000030000000304, @broadcast}, 0x16, {0x2, 0x0, @remote}, '\xecJ\x00\x965\x00'}) 10:26:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffffc, 0x12) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 10:26:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x802) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "24b0eb7946c64808cb757347a4ebf52dddc47b4969c2dfb993300525cff83cc7e9"}, 0x2c) readv(r5, &(0x7f0000000540)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000080)=""/69, 0x45}], 0x2) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "3a9dfc784ba5b015", "590fb4fbaf75343a0d9881470b535ef4", "94ba4ed3", "f42f17a1e9e68dc4"}, 0x28) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) fchmod(r6, 0xc0) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000000400)="bc9f666916ed0768bdcaf4728a3af2d503c618e8b6ec069d2681ccb06b3dff8e62d9556c6bd2dd520e0d0767f806a421b772029e5d0a9540869e8a491cef2e89ee2eab648653", 0x46}], 0x3, 0xc) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[]}}, 0x0) fchdir(r2) creat(&(0x7f00000001c0)='./bus\x00', 0x4) r7 = creat(&(0x7f0000000740)='./bus\x00', 0x10) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@local, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xffffffffffffffa0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @empty}, &(0x7f00000005c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000640)={@empty, 0xf, r8}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() fsync(r7) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x0, 0xfffffffffffffc00, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x6, 0x0]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x0, 0x0, 0x0, 0x8}}}}) socket$key(0xf, 0x3, 0x2) clock_getres(0x2, &(0x7f0000000340)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x101) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x1) 10:26:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18) 10:26:43 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000040), 0x4) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000010c0)) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000001100)) memfd_create(0x0, 0x7) memfd_create(0x0, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000000)=0xe8) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000480)={'L-', 0x2800000000}, 0x21, 0x3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x101000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000900)="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", 0x100000236) fcntl$getown(r8, 0x9) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @dev}, &(0x7f0000000440)=0xc) sendmsg$IPVS_CMD_GET_DAEMON(r7, 0x0, 0x40) r9 = inotify_init() getrusage(0x0, 0x0) inotify_add_watch(r9, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, &(0x7f00000004c0)) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r10, 0x29, 0x3b, &(0x7f00000011c0)=ANY=[@ANYBLOB="000000000000c62e5f6d799c10f25ff26e85a6fac1050fbdaebb4c8321b94a6dc58d729d02000000000024cb00007a2b6effad992135d3a7bcaf"], 0x1) getsockname$packet(r3, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001180)=0x14) sendmmsg(r10, &(0x7f00000092c0), 0x9ca, 0x14000890) r11 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r11, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r11, r11, &(0x7f00000001c0), 0xa198) getdents(r0, &(0x7f00000000c0)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) [ 371.007882] input: syz1 as /devices/virtual/input/input21 [ 371.049146] net_ratelimit: 7 callbacks suppressed [ 371.049154] protocol 88fb is buggy, dev hsr_slave_0 [ 371.059186] protocol 88fb is buggy, dev hsr_slave_1 10:26:43 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RCLUNK(r0, &(0x7f0000000740)={0x7, 0x79, 0x1}, 0x7) [ 371.102081] input: syz1 as /devices/virtual/input/input22 10:26:43 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000001140)=0x0) io_submit(r1, 0x2, &(0x7f0000003a80)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 10:26:43 executing program 5: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) fcntl$getown(0xffffffffffffffff, 0x9) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797a311644b9e711590eeb2251dc9532be6536e0bf5aa13b8ec26e59211526d508f2f498e98263a13e32316e535fed803c11cb52af0061b9cdb2000000307e2c4814b4c97cdd05b6c37cb1df732ea6706e58295d300474905d48149cce8db380d6c16dad6c8c373d002c41fbed78b35efe672f1416ddc7711f4c3519d0dfb9c21f1a"], 0x61) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="7200000000000000000080101000000000000000000000000000000000000000000000000000000000000000000030efa95d34bfd800000080000000000000000000000000000007000000000000000000000000000000000000000000d400"/106], 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0), 0x0, 0x4) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xa4) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000300)) 10:26:43 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x4}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x19) wait4(0x0, 0x0, 0x0, 0x0) 10:26:43 executing program 4: socket(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) capset(&(0x7f00000001c0), &(0x7f0000000040)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x2a4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x1000000) [ 371.448404] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 371.467454] ptrace attach of "/root/syz-executor.4"[15370] was attempted by "/root/syz-executor.4"[15371] [ 371.609185] protocol 88fb is buggy, dev hsr_slave_0 [ 371.614296] protocol 88fb is buggy, dev hsr_slave_1 10:26:43 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffffb77000000a003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r3 = creat(0x0, 0x0) mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}], 0x2, 0x100000) setsockopt$rose(r3, 0x104, 0xf8769830c576c9a9, &(0x7f0000000100)=0x3, 0x4) r5 = geteuid() r6 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r6, &(0x7f00000002c0)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='hybla\x00', 0x6) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r9, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r10, r9, 0x0) r11 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r11, 0x1) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r12, r11, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x210000, &(0x7f0000000740)=ANY=[@ANYBLOB="18762e4a32ae556eaf606bb3646e6fc4936e2e69e95375912700f564f1a0258f7b98e93966cb8aa936613f1a87ad899418a9144e62d11a328e212347436a2fad295ff945aed8e8564411c05e9d870ad29987094d4186f2f6093a04eaaba84bd6f688db43a96854258b667fdf57708506f286350e101a8c23547f7c6778219346aec0803b5a32efbc3c", @ANYRESHEX=r10, @ANYBLOB="2c7766df215bc2e95b00000000000000", @ANYRESHEX=r3, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64=r8, @ANYRES32=r3, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYRESHEX=r6, @ANYRES32=r3, @ANYRESDEC=r7], @ANYRES64=r12, @ANYBLOB="e5782a020ea23a1cf13147e9a1d90f1fa312eebe80218f71844bf7db304c10a57b75eaa212202fbdaa943e1839d4ea7e30037ffec34757fa11050c3243f410ae02394ef770d62929e21c4fbad2360a9fb17e54b6b2b32c9f37", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRESOCT]], @ANYRESHEX, @ANYBLOB=',version=9p2000.L,mask=MAY_APPEND,uid>', @ANYRESDEC, @ANYBLOB="2c050069643e", @ANYRESHEX, @ANYBLOB=',\x00']) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, r5}}, {0x0, 0x2}}}, 0xa0) r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r13, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r14 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r14, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r14, 0x1) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r15, r14, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x1000, &(0x7f0000000980)=ANY=[@ANYBLOB="7b4ff6c97472616166cd4657556e733d66642c7266", @ANYRESHEX=r0, @ANYPTR=&(0x7f00000003c0)=ANY=[], @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x4, 0x125801) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 10:26:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x3, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) fsetxattr$security_ima(r3, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="bfb6ae7585bc014435cd746d079b39ea7dbfe7e5ba8ddab7e0f3c99791fc7ce4b9066bb57f012ef1acba5d6e74775b640ec9b5df54fb6225cfc6283cdf44ace489e69a6ebaeecc5974156692153d9bf1ccf45112bb3738b5cc121e33393d864be10951f5658c20cc67ae3e7e4585aa3828edbab8cc0c954266ce4326cab13886ae6925bfb7913b2027904e6efc72fa1b280466f4c9d5e119e200ddaaee0da7568a54d02cd54df87cbc0bb60f8c45c79528712949bb849afd87"], 0x1, 0x1) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r4 = getpid() r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[]}}, 0x0) prlimit64(r4, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(r3, &(0x7f0000002480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r2, 0x24) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/netlink\x00') ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r4, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) 10:26:43 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x200}}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aad2cae27b2b866d83000000000105000600200000000a000000000309e6646a04a0fdca0af2000000000000000000250000000000000200010000fdffffffffff010000627c05000500000000000a00000000000000ff17980500001f0a00"/128], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 10:26:43 executing program 3: r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000300)="5ca8195094bc8b51f462d0363f4047b408e16d8d", 0x14) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00'}) ptrace$setregset(0x4209, r3, 0x20000004, 0x0) [ 372.089734] ptrace attach of "/root/syz-executor.3"[7598] was attempted by "/root/syz-executor.3"[15403] [ 372.126483] ptrace attach of "/root/syz-executor.3"[7598] was attempted by "/root/syz-executor.3"[15410] [ 372.215091] IPVS: ftp: loaded support on port[0] = 21 [ 372.249147] protocol 88fb is buggy, dev hsr_slave_0 [ 372.254260] protocol 88fb is buggy, dev hsr_slave_1 10:26:44 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RCLUNK(r0, &(0x7f0000000740)={0x7, 0x79, 0x1}, 0x7) 10:26:44 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065fdff07000000000000000f5217012deabb2b2044df373030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x4) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = epoll_create1(0x0) dup3(0xffffffffffffffff, r2, 0x56c61a60c1b5d962) r3 = syz_open_procfs(r1, &(0x7f0000000180)='fd/4\x00') epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000000480)='./bus\x00') write(r5, &(0x7f00000001c0), 0xffffffe0) read(r4, &(0x7f0000000380)=""/250, 0xd83781586c4649d2) sendto$inet6(r3, &(0x7f0000000240)="9900"/19, 0x13, 0x4000000, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @remote, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) socket$netlink(0x10, 0x3, 0xa) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') readv(r7, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) readv(r7, &(0x7f0000000580), 0x3c1) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000000)=0x9) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=0x123) sendfile(r6, r8, 0x0, 0x8000ffffffff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x800, 0x0) ioctl$TIOCLINUX7(r10, 0x541c, &(0x7f0000000200)={0x7, 0x20}) 10:26:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xffffff73) 10:26:44 executing program 4: bind$inet(0xffffffffffffffff, 0x0, 0x0) clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x38) ptrace(0x4206, r0) ptrace$getregset(0x4207, r0, 0x0, 0x0) 10:26:44 executing program 4: socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @empty, 0x0, 0x3, '3q\xf7YM\x13D\xab\x00', 0x20}, 0x2c) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:26:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) r2 = dup(r0) socket$inet6_udplite(0xa, 0x2, 0x88) getpgrp(0x0) sendmsg$netlink(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000280)={0x10}, 0x10}], 0x1}, 0x0) [ 372.569135] protocol 88fb is buggy, dev hsr_slave_0 [ 372.569160] protocol 88fb is buggy, dev hsr_slave_0 [ 372.574224] protocol 88fb is buggy, dev hsr_slave_1 10:26:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x2fd) set_robust_list(0x0, 0x0) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="0fa90371868e4087ebd9c2a9b12c", 0xe}, {&(0x7f0000000680)}, {0x0}, {&(0x7f00000004c0)="1ce08597e413213fad5c1a59a44ae736aaadf6e70bf947c483a3322f0acb48caf8e06b93b3bccbc045d19e4cedb87493d9732fbaba393cddb1d3c5d042b01f5e417583f5eb398932248c888ec0c74ce79226a0c7a866d4929306aa3df7c5c9eff55c75624bb6ec552e30bd8d7a51e71b1da2913a7157f432a67ea71d6356", 0x7e}, {&(0x7f0000001680)}, {0x0}, {&(0x7f0000000580)="5911d63cc1bc7299882840c7f9df5823b7f354c05b6b851f4b043f9108fc8b1d5ad8598403d692e17219ef293086a49581116de0de5132595721592ff94146d9181b0a96f766bb790aaa652279cd8bd45b4b9a7a4e31def799ae7f2b12540283adc3fc0741cd0933238754840adfe9", 0x6f}], 0x7, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, 0x0, r1) connect(0xffffffffffffffff, 0x0, 0xd413a8e7e4fd9693) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0xc15ac82d3cb7c18b, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sigaltstack(&(0x7f0000952000/0x1000)=nil, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x7c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) linkat(r4, &(0x7f0000000640)='./bus\x00', r4, &(0x7f0000000400)='./file0/file0\x00', 0x1400) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340), 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f0000000880)) write$UHID_INPUT2(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfb) [ 372.655241] kauditd_printk_skb: 7 callbacks suppressed [ 372.655255] audit: type=1400 audit(1573468004.630:150): avc: denied { create } for pid=15418 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 372.673476] ptrace attach of "/root/syz-executor.4"[15437] was attempted by "/root/syz-executor.4"[15438] [ 372.793327] audit: type=1400 audit(1573468004.700:151): avc: denied { write } for pid=15418 comm="syz-executor.5" path="socket:[60410]" dev="sockfs" ino=60410 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 372.977091] IPVS: ftp: loaded support on port[0] = 21 10:26:45 executing program 2: socket$packet(0x11, 0x20000003, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$KDENABIO(r1, 0x4b36) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x502, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200005) sendfile(r3, r4, 0x0, 0x8000ffffffff) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000140)=0x8) r5 = open(&(0x7f0000000240)='./bus\x00', 0x8000, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) 10:26:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) memfd_create(0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x0, 0x0, 'rr\x00', 0x10, 0x0, 0x76}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000009, &(0x7f0000000000), 0x4) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) pipe(&(0x7f0000000300)) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0), 0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200005) sendfile(r3, r4, 0x0, 0x8000ffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) 10:26:45 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x1, 0x4) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:45 executing program 5: pipe(0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r0, r2, 0x0, 0x20020102000007) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$int_in(r1, 0x5452, &(0x7f0000000480)=0x845) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 10:26:45 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 10:26:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000740)={0x1, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}]}, 0x18c) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) 10:26:45 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vga_arbiter\x00', 0x2000, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000000}, {0x0, 0x9}}}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x14c, 0x5, 0x0, {0x0, 0x0, 0x7}}, 0x1f4) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000180)={0xc023, 0x1}) r4 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x109000) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) r5 = add_key$keyring(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='mime_typesystem{]\x00', r5) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wVdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) modify_ldt$read_default(0x2, &(0x7f0000000600)=""/4096, 0x1000) r6 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000105042, 0x0) write(r7, &(0x7f0000000200)="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", 0x511000) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)="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", 0x1ca) sendfile(r6, r8, 0x0, 0x7fffffa7) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001680)={0x0, 0x400, 0x1, [0xb0f9]}, &(0x7f00000016c0)=0xa) r10 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r11 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x4d) write(r10, &(0x7f0000000600)="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", 0x1ca) sendfile(r10, r11, 0x0, 0x7fffffa7) ioctl$SIOCRSGCAUSE(r10, 0x89e0, &(0x7f00000017c0)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001700)={r9, 0x305eca94}, &(0x7f0000001740)=0x8) 10:26:45 executing program 4: mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') symlink(&(0x7f00000000c0)='..', &(0x7f0000000100)='./file0\x00') umount2(&(0x7f0000000280)='../file0\x00', 0x2) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) 10:26:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000000)={'syz_tun\x00', @ifru_hwaddr=@remote}) 10:26:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@dev]}) 10:26:45 executing program 2: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000140)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = eventfd2(0x0, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x280080) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3f, &(0x7f00000000c0), &(0x7f00000005c0)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r6, r6, &(0x7f0000000180)=0x74000000, 0x5) pipe(0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x2008004fffffffe) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000240), &(0x7f00000002c0), 0x8) creat(&(0x7f00000004c0)='./bus\x00', 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0xa8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000240)={0x0, 0x0, 0x100000000000000a}) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpriority(0x1, 0x0) [ 374.009902] 9pnet: Insufficient options for proto=fd [ 374.097813] 9pnet: Insufficient options for proto=fd 10:26:46 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff018000003950323030302e4cfb2d0bae2e30d65339a72ef9f681ee885d32d9652a5d2459be2a6ba76c7cdd9ff8d59793e1ef5fe94c8e7f0f4f69e9b7e8122dc0d1a40f21f419297dfe1c9c50a2c0175fbb3ba933ca72050b9c587fd1796e08dbc5b67321bba3f681457cdc48259ee2e91529ee6145637abd7045feea026bbcd9c2fc264e378943350e796dd0be7a7fe055c3f2d1e760b124c116c1525d5a0ab65638479eeb2300000000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x40, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000b00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20009042}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x21c, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe1fc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x50, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6fa5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_BEARER={0x154, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @loopback, 0xf2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @loopback, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf445, @remote, 0x400}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe280}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x810}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, [], 0x25}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0xab0cedda01c8c811}, 0x0) write(r3, &(0x7f0000000600)="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", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) write$P9_RLCREATE(r3, &(0x7f0000000280)={0x18, 0xf, 0x2, {{0xc3, 0x2, 0x1}, 0x7}}, 0x18) lsetxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)='security.selinux\x00', &(0x7f0000000500)='/sbin/dhclient\x00', 0xf, 0x1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000340)={{0x3f, 0x4}, 'port0\x00', 0x40, 0x40050, 0x401, 0xd1, 0x5, 0xfffff880, 0x7, 0x0, 0x4, 0x5}) umount2(&(0x7f0000000080)='./file0//ile0\x00', 0x11) mknod$loop(&(0x7f0000000540)='./file0\x00', 0x1102, 0x1) 10:26:46 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x6}, &(0x7f0000000100)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001480)={'bond0\x00', &(0x7f0000000c00)=@ethtool_dump}) 10:26:46 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) io_getevents(r1, 0x0, 0x1, &(0x7f00000000c0)=[{}], 0x0) [ 374.377568] audit: type=1400 audit(1573468006.340:152): avc: denied { mac_admin } for pid=15510 comm="syz-executor.1" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 374.377655] SELinux: Context /sbin/dhclient is not valid (left unmapped). 10:26:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x9a6}], 0x1, 0x0, 0x187}, 0x100) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="c0831d29e97834af45ba4cbd422047e80d88ab527bae215d0779a01c0607a8447aa37f102ca4c7e89ba16ab90cf78c127b4f0e5be886d2", 0x112}, {&(0x7f0000000480)="646d66f1fb274041aff71096d579de90d7db37e9f4abea6784e365687424e3d3103d63f1e9b4ea85a00c87ec5cc01925820661672a9e6edf3534dd8721072bd156c28d4814c965d206b986d2e4fe42b59eef0d22212026bd3f349877973e947122f5de187f75f7c310229724bca931b47b05c80958aa4b18ae29d70d46e7d70ffaf5fad7e26e3375b3ec53d91d92abbc4774eaeed307acc690e4d65ef3b27a42e2885ad1e322b67e482c9ce3201c3318004d31284731", 0xb6}, {&(0x7f0000000340)="b944e47f6b81e988bf1c4786b17a737a5ee12d2ca35e974c04d56dffdfdd40dea3cef1a10653759816e412b8abc67c03952d8f04e235a44942bfc9cf571c99cdf02c1bf11634fb24b49a481754de093b196bc135241bb42e300400000000000000f27d8082fce3e8c4147af71aceb6b6903354", 0x73}], 0x3}, 0x0) r1 = dup(r0) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x76b}}, 0x0) 10:26:46 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000000c0)=0x3ff, 0x31a) 10:26:46 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 10:26:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000080)) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x180) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') r9 = openat$cgroup_ro(r8, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1}) preadv(r9, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x32a5449}], 0x340, 0x2000107c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 10:26:46 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000000140), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000001840)="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", 0x7c1}], 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f00000015c0)=[{&(0x7f0000001480)='!', 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 10:26:46 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001200)=[{&(0x7f0000001100)=""/233, 0xe9}], 0x1) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000000003, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000aea000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x18000) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) 10:26:46 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x1ca) sendfile(r3, r4, 0x0, 0x7fffffa7) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0x2, {0x8, 0x1, 0x800, 0x1f}}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:46 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'nr0\x00'}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:47 executing program 5: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff}) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) getresuid(0x0, &(0x7f0000000180), &(0x7f0000000440)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getrusage(0x0, &(0x7f00000008c0)) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000006c0)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000000)=0xffffffffffffff7c) connect(r0, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000680)={'L-', 0x2800000000}, 0x28, 0x3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)) fstat(0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000600)=ANY=[@ANYBLOB="0000040000000006a5763af841c07d429e49e4756552dcd026f1b67a2d4e020006000fafe77f08cd89518e9711f66ecb31b5aed1f03027d7a45d8febde333a72b3b77f000000000000"], 0x8) sendmmsg(r4, &(0x7f00000092c0), 0x170, 0x0) r5 = open(&(0x7f0000000380)='./file0\x00', 0x200c2, 0xfffffffffffffffd) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r5, r5, &(0x7f00000001c0), 0xa198) 10:26:47 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='0.L\x00'/14], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:47 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x200000000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffffffffffff41) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x3f00, &(0x7f0000000100)=@abs, 0xa) 10:26:47 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @loopback, 0x1}, 0x10) 10:26:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = syz_open_dev$mice(0x0, 0x0, 0x202000) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r6, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406055c9, &(0x7f0000000880)={0x7, 0x7, {0x53, 0x7, 0x9ab, {0xfff}, {0x1, 0x80000000}, @rumble={0x7ff, 0x10001}}, {0x0, 0xefa5, 0x80, {0x1, 0x40}, {0x0, 0x100000001}, @cond=[{0x40, 0x6, 0x4, 0x400, 0x4, 0x3f}, {0x6, 0xfffffffffffffbff, 0x0, 0x80000001, 0x1, 0x3}]}}) lseek(r3, 0x0, 0x2) sendfile(r3, r7, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r3, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 10:26:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@can, &(0x7f00000002c0)=0x80) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x37) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000440)=0x14) ptrace$cont(0x9, r2, 0x0, 0x0) creat(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={r3, @loopback, @remote}, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') fchdir(r5) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000000c0)="f96850332e0b4ac6f31bcbc9e021fc4ef26ed6b652a156a2c691258e69f454993be03c9a05d9d87c3373d865af48f5b6d97a231a57095d852dfaa522", 0x3c}, {&(0x7f0000000300)="d0221a262f72cd08db63f6da5bd47da83a14a846cf9ced0cb6a6a7732b4b68c5f50fdb0c3a9a0dd55d4fc85cfab73209982d7168a3d6c12378fb2addb68c3eab162902cc24f28463d0ac5a37be6b490a06c3b6811561e24c799b6f062cc120742a1d3351100d27916a4db2af613910182bd078145d5656aeed273dd86cfc869885b4982a8b15f87b933601", 0x8b}, {&(0x7f0000000480)="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", 0x1000}], 0x3, 0xa) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000002c0)={r7, @loopback, @remote}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000001800)={@multicast1, @dev={0xac, 0x14, 0x14, 0xa}, r7}, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000001480)={0x80, {{0xa, 0x4e20, 0x10000, @mcast2, 0xffffffc0}}}, 0x84) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000200), 0x4) clock_gettime(0x1, &(0x7f0000000400)) [ 375.820118] ptrace attach of "/root/syz-executor.2"[15598] was attempted by "/root/syz-executor.2"[15599] 10:26:47 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 10:26:47 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffff5}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r1, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r4 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r6, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) read(r7, &(0x7f0000000000)=""/250, 0x128b9372) close(r5) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) creat(&(0x7f0000000440)='./bus\x00', 0x84) creat(&(0x7f0000000100)='./file0\x00', 0x0) 10:26:48 executing program 3: keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f00000018c0)="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") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x11c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x40}, 0x328) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x1c9) 10:26:48 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x100, 0x0) write(r0, &(0x7f0000000600)="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", 0x1ca) sendfile(r0, r1, 0x0, 0x7fffffa7) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x5, 0x6, 0x11ebcf9b, 0x400, 'syz0\x00', 0x10001}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff01800000b8483950323013d2a90b"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r4, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766b16e6f3d7cbe1c63fb77f94dbc5cd7b3f333e3d606c3cab5058887886c67ba6d57d39ecf956ea0756c3e592f9c479dc5", @ANYRESHEX=r4]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x0, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0xa, 0x0, @multicast1}}]}, 0x110) 10:26:48 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/526], 0x12e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000200), 0xc) 10:26:48 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001780)=""/109) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000001c0)='./bus\x00', 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)=@generic={0x0, "ff80f096dc909d329774e6a8dade60ee2bdaabb4abb857eb5baec14815f0a69bd69feee1c43c775ac38e40b47b092d7cc165e503fe31d4a94a66d3c1b3b41af77425d24669a3ca462de284e1169bd5babd3312ebf023fe460ed630e38452416f2d51ff14660be2eed6bba6e5352188bd025b6f60cc8bc400a25a3350e207"}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0xfa}, {&(0x7f0000000080)="5c854701969bf896", 0x8}, {&(0x7f0000000400)="ff8d", 0x2}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10c}, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000300)=0x20000000) fcntl$setsig(r2, 0xa, 0x25) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0f0000257fffff0000deffffff00000000aa2425eac19bc98043edab9d71200cc7ad"], 0x14}}, 0x0) fremovexattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="196fb0e5f8f2005563b198a8dd350724219f65"]) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 10:26:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = creat(&(0x7f0000000740)='./bus\x00', 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @empty, @empty}, &(0x7f00000005c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000640)={@loopback, 0x0, r5}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(r4) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000007c0)={&(0x7f0000000200), 0xc, &(0x7f00000006c0), 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/user\x00', 0x2, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)={0x9c, 0x29, 0x2, {0x9, [{{0x0, 0x0, 0x1}, 0x8, 0x3e, 0x5, './bus'}, {{0x40, 0x0, 0x6}, 0x38, 0x0, 0x5, './bus'}, {{0x5, 0x1, 0x8}, 0x1, 0x0, 0x5, './bus'}, {{0x0, 0x2, 0x2}, 0x2, 0x20, 0x5, './bus'}, {{0x12, 0x2}, 0x7, 0x0, 0x5, './bus'}]}}, 0x9c) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002004}, 0x8000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000001080)=0x1e) close(r1) [ 376.341453] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 376.372859] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on sz1 10:26:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000800)='/dev/loop#\x00', 0x10001, 0x4000) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffca7) [ 376.419179] net_ratelimit: 15 callbacks suppressed [ 376.419186] protocol 88fb is buggy, dev hsr_slave_0 [ 376.429284] protocol 88fb is buggy, dev hsr_slave_1 [ 376.483460] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max [ 376.518190] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on sz1 [ 376.569404] 9pnet: Insufficient options for proto=fd 10:26:48 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000540)="4600000031007f00000083863b715d7b000800007700fbff02000200000006fcffffffffffff0100ff10f1762903000000f356493775a47db12effffffffffffff4c34830174", 0x46) [ 376.606785] 9pnet: Insufficient options for proto=fd 10:26:48 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x1ca) sendfile(r3, r4, 0x0, 0x2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000080)={0xc, 0x1}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 376.665697] audit: type=1400 audit(1573468008.640:153): avc: denied { setattr } for pid=15628 comm="syz-executor.4" name="NETLINK" dev="sockfs" ino=61672 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 376.729135] protocol 88fb is buggy, dev hsr_slave_0 [ 376.729169] protocol 88fb is buggy, dev hsr_slave_1 [ 376.734238] protocol 88fb is buggy, dev hsr_slave_1 10:26:48 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}}) 10:26:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) fcntl$setstatus(r0, 0x4, 0x2000) [ 376.771084] netlink: 50 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "09594280da219c695048ebe43862c5a58bb7e28722f326e9a712053b70346141", "4932da20e349b9c14e55d82de9232c666e6c318ed0ce447ff17b541b44203b23", "970d5cc12cd29837ade7c9fc3e3bb94bb22e5953d88792fcacc41d6f2ea49041", "4ef82f6664f69abf22818ed504104a48d6a6360d021090aa40c182b08f38adbc", "8b099fc32f8f1b367d1aef6103552667be8179ffdd179a71d051816695976cce", "8af19e7b959725f15c65e502"}}) [ 376.960313] ptrace attach of "/root/syz-executor.2"[15658] was attempted by "/root/syz-executor.2"[15659] 10:26:49 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0xfffffffffffffc9d, 0x0, 0x0, {0x7}}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101481, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000600)={0x0, {{0xa, 0x4e21, 0x7, @mcast1, 0x80}}, {{0xa, 0x4e22, 0x9, @loopback, 0x6ad}}}, 0x108) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r5, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000000600)="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", 0x1ca) sendfile(r7, r8, 0x0, 0x7fffffa7) ioctl$KDSETLED(r7, 0x4b32, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x2c64, &(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYBLOB="be4c4902657e1e2fa53bb8ed7cf8cf58d603dafe635e76917f1c3abbcc2df6d2ac399ff0552f7153f6b63afeb29410513619d8ac7ab4215e2b5dcfbbde503244718f206b851826697e7b7edcb5b67d655bf4a805f3748c38864b958a3d32957b1d2935857e8ba41483a90b07616268e63833a9e6492d291e597f0722ebdaf5c42dc1179fc432548ecd9e7c4d9d8bbab50f", @ANYRESOCT=r2, @ANYRES16=r5, @ANYRES16], @ANYRESHEX=r0, @ANYRES32=r4, @ANYRESHEX=r2]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) write$FUSE_IOCTL(r9, &(0x7f0000000280)={0x20, 0xfffffffffffffffe, 0x3, {0x2, 0x0, 0x0, 0xa31d}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000800)={{0x0, 0x3}, 'port1\x00', 0x40, 0x20a00, 0x400, 0x10000, 0x1, 0x8, 0x7, 0x0, 0x2, 0x7}) 10:26:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:26:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r5 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0x99}, 0xff7f) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x1, 0x3, 0x8}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x5}) 10:26:49 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x400000, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001}, 0xfffffe2d) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x7}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1b, &(0x7f0000000100)={0x0, 0x0}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r3, 0x1) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) times(0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xffffffffffffffc0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x0, 0x1}, 0x1c) recvmsg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r3, &(0x7f0000001a00)={&(0x7f0000000080)=@ipx, 0x80, &(0x7f0000000380)=[{&(0x7f0000001400)=""/235, 0xeb}, {&(0x7f0000001600)=""/250, 0xfa}, {&(0x7f0000001500)=""/180, 0xb4}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000001700)=""/166, 0xa6}, {&(0x7f00000017c0)=""/187, 0xbb}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000001880)=""/233, 0xe9}], 0x8, &(0x7f0000001980)=""/79, 0x4f}, 0x2) 10:26:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001700)) 10:26:49 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x442000, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280)) ptrace$setregs(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)="99ad67e141088161105cbadef9d3f274cf8557e63b1ff58cd2c096d1e9779e7ee415848fec5dcf759e8df5ed73aaceeb88b0ccbccde75294dcefcca149dffade7d8353133173cac5d9982b5c88cc4797fffb1f9871268d") write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x3, 0xffffffffffffffe0, 0x401}}, 0x28) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000002c0)=0x5) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001400)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000001900)=0xfffffffffffffd9b) setsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000200)=0x80000001, 0x4) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000000c80)={0x8, "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", 0xf05}, 0x1006) sendfile(r4, r4, &(0x7f0000000240), 0x2008000fffffffe) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) [ 377.289163] protocol 88fb is buggy, dev hsr_slave_0 [ 377.294305] protocol 88fb is buggy, dev hsr_slave_1 10:26:49 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwrite64(r0, &(0x7f0000000180)="aa", 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) chmod(&(0x7f0000000040)='./file0/bus\x00', 0x0) dup2(r1, r0) 10:26:49 executing program 2: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x4}) unshare(0x40600) ftruncate(r1, 0x39) r2 = gettid() write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0/bus'}, 0xf) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 10:26:49 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) sendmsg(r4, &(0x7f0000000280)={&(0x7f0000000180)=@generic={0x0, "11c098032d907c7410f2bf47e6e72f2a826186e9cd356f6290138f24a2cebe093b58b79dbee151955fccc83fe1e7e0b14ec84eae55290d03ad947d9a3d3be529ab3fc29a80cd6ee856716ff09dfaf1bce4f89849243c805a111fc9d47d730129baf7531588d3cf199f61792b9d06f97b85f98b21889085b3a534236063d5"}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="fdc101717dd3de910492b3119f2e1c2d496b733efe0d7a22c7759a123a1d37e0e59efa5d7b161da1348e8ee4557e16494dfbe1eab54f6808199e2081e0edb50797cb0ae62ba51f680d15183f6bc82c97ba10d69c25928b944e77f3d445df5c66806c1bcb5781943ea580d95ad3c0271ecfde7d8606f6a207f4f6c196f2b7e7a81d6314da1d1a06ec58513ac0853e77840851d3c39bf63c984db4cefba4f2", 0x9e}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f0000000600)="7b68344f61e70352439cdc01ce1f5b3be11199501deb179ba0ab309ab7d1b69e4cca6d3779c080ea6a64ce22f1dae8c3fa445898093218e0a1154cff046fab28571da4a59f79ff959479de96b0f080c2cd292b083816a71d8fb9c5f654e66c2524133754d0deab43abef5dd4e53c7ef0a1701db75592be42bf297496c355b857d7409a51e59182e6bb9668544d6380a3b1446c248bb4ae600cd065c88d", 0x9d}], 0x3, &(0x7f00000006c0)=[{0x10, 0x10e, 0x5}, {0xb8, 0x103, 0x4, "082e7112b8f3e6816a68b4ac1846291ad8dfac8503010bfbd43b46909eab0c82abc2f80fba9f335c6eeb198043a310a072d55e065940df9af28301933f1b92b8954db47a1996cbba2949c3bc8fc8f8f91c8c5642bb4f24f89f9ec44c3aa0fabfe4b05ef626897b39674e8c770639922e8ec26cf1f6736b57b986b0342452c0103e6eb741815c1cb6cb0e3efd9d185f5f84618352a02754c3840dc07fecf213e13eec2ece9139"}, {0xb8, 0x3e4316a7f02e0d81, 0x7, "e4c5207191b0a3fd16bfdbd164dfc71f39debb7cdf4ed6e84622e65195b76c8800a37dfe95e0145b3161ec8a20cd6a93f6d143f0c06f07dbc0483ea6ee5e28d9865eeaaa6daf76d10463b01ee384ed837a60e2e80c5a81bc5f4513947261280e0872db0ff3a1b8f5d10cf0f8bdcaffc5a885095fb624563b6c30eca26dedb398ce9eba8cd94fba72b2dcc7055194253fb8574db8aa88ea066fe956b10060c6d221ac73ab6236ae"}, {0x90, 0x102, 0x9, "b81f99f716d3bdfe704b4229f5425857c30c4b1682b3ed35b370890b33fe063856527a1ca25c6bdb157774e0f52698056d1f867fcdad7db7db5078ccdda0aedd68ae6d2f3877faab3be8214275c8413f726a6d3a3a9da3ea89654a0a2b83c2428570500c48815a9b62894908dea04809a343899fd029beab40673fe99ee9"}, {0x90, 0x100, 0xffff, "912fbf4769288b4b22867060889e8d7169ae2775cff71617b0a1c195e3f72876e872b46298c6264f40bcf19700ac00b5304bc8f4e650c89b50a5b6f7704da94c8b49a35c82ac641c71b30488d7de1e7559c6f9a261f9da6f205567829f4a49b8ad287944471395cd1a109f53c3abe183bf58098e37e4d99f5a2ccd9f6381"}, {0xa8, 0x111, 0x7f, "cb51194d9c1c58c5d5b83a6712623fa8846ecd6d795680297e095d0c919731150f255efe1a310a2c7643da121e03ea41a816703947a44871e869f6f098b7d266cfd73c46e5dce2e12625273865fbe6a7a2882a1af1c3f77899eeefb339f9dca7c5cf318fc0b54a59464c57898a005f406adf68bc4958c69e6d006dd809c80d8d82a70f3f707b92726eac7537bac4b6a0ce2008db4e"}, {0x58, 0x114, 0x5a, "bfaca2d3fadbc83ad39b7781a32e8e93dadd2293514be8b850f489cec73130ba1128d239336d58b3365254f054dce0badf481f1cc463b8efd328bfe485dccfcc398603fb67"}, {0x70, 0x0, 0x80000001, "b308bf75f621801897a9c0e893fbe5c2716f72009005e6ae5b467ee06f4fec06be4a3a3f8a45796e86d9229f3c8f62f721a9357ea8144ebec1b55a4941baff15944755cc316bf248648686c96521ef7d05fc4a13b41b85d8e7ae1032"}, {0xe8, 0x3a, 0x5, "237f7dea44b111695a8fbedd8a7ace2b779f264606b4157e0431aa47073495407fde52c4a9117f2cede797440cc224a33e1bded58676f745047c534a2791be073bafebe7a227fff03e710b92419851ab841b11df056893f0e29f5b0e2c1c02ba6882dd3fba0b42ffb852861d89d23be9d13db9954297c5cb7f7a95b150cb632c9f1d5fde9f13db4d41437dd69186738b2dbfca3ed794279e65af30af7ae4da5094aec2e5f8363acb0c9208b3beefc1bf1567695f45108e49f3550f1abcfe493361695bc062ef9474d7c3e5dcbf930683e7da67614843f4a3"}, {0xa8, 0x110, 0x4, "d157827559e10ec3c176cb15243af92a2d3e26e0f632c153ff0dcf85f99ece464d69683ac77a3a53da72c9eaeddb915ee78f4c845996d727fd37340aa44c34d4abb7dd37c925a4622fc57811610b8359f170c8935328435d21dee855330d0d350c768d59ddc61c40c238270a72e52d62e751e389cea179688cfc553810ea9973cf4ad8e20f59c0142e1bc377754906bf0c68401a4bad"}], 0x5a0}, 0x8000) fchdir(r2) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="58d3fff9853d9bfb389232000000053dd1199cb67e59548b4e6e4a1f00"/40], 0x15) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x22, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}}, 0xa0) write$FUSE_BMAP(r5, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r0, 0x50800) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000001005000000000100000000000000000000000000000000420000000000030000000000a0000000008e7ef60000000000000040000000ffe700000000009f1e7a30461b851a5c0000be8c9a0d866e8402243ad61c83", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000024000000003c000000b79094467f3c53259364c2264d64bfe000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c0008000800080000000000"], 0xfc}}, 0x0) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x80, 0x5) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0x526987c9) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f33\x00'/44]}) r10 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r11, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r10, 0x0, 0x0, 0x5}]) r12 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r13, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r12, 0x0, 0x0, 0x5}]) r14 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r15, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r14, 0x0, 0x0, 0x5}]) r16 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r17, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r16, 0x0, 0x0, 0x5}]) socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r18, 0x0, &(0x7f0000000580)) r19 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r20, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r19, 0x0, 0x0, 0x5}]) r21 = socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r21, 0x0, 0x0, 0x5}]) r22 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x0, &(0x7f0000000040)) r23 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) r25 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup2(r25, r23) fcntl$setstatus(r23, 0x4, 0x44800) io_submit(r24, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r23, &(0x7f0000000000), 0x10000}]) io_submit(r24, 0x1, &(0x7f0000000080)) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYRESHEX=r22, @ANYPTR, @ANYRES16], 0x0) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r5, r4, 0x0, 0x80005) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000340)=0xfffffffffffffe2d) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) r26 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r26, 0x29, 0x5, &(0x7f0000000080)=0x1, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r26, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r26, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x5, 0x40000002871, r26, 0x80003000) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) 10:26:49 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x59f8c107b2ac999) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000180)={0x80, 0x0, 0x3, [{0x5, 0x2, 0x0, 0x6}, {0x4, 0x2, 0x1, 0x89d, '\\'}, {0x0, 0x1, 0x0, 0x782}, {0x2, 0x0, 0x3, 0x14000000, '9p\x00'}]}, 0x80) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 10:26:49 executing program 2: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000140)='pagemap\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') [ 377.845402] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1296 sclass=netlink_xfrm_socket pig=15710 comm=syz-executor.4 [ 377.849147] protocol 88fb is buggy, dev hsr_slave_0 [ 377.862831] protocol 88fb is buggy, dev hsr_slave_1 [ 377.895942] 9pnet: Insufficient options for proto=fd 10:26:49 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000000c0)=""/34) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0xffffffffffffffa1) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ftruncate(r3, 0x2007fff) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7e070d4c0b8504"], 0x7) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r6 = socket(0x18, 0x0, 0x4) connect(r6, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xe) [ 377.923651] 9pnet: Insufficient options for proto=fd 10:26:50 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) sendmsg$sock(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="044055be921f8f24e8ecd0325a9bba483ea4be928c4776977e9f2bf4e8e9f3cc99661a759f04d8742b5a1b6073a614d5a42c821f88268ad5ae1b6ffdce27dd75031cef7ccd75db83da81d60bdbf2a9362f4cff0206a7bf6a90138039b227", 0x5e}], 0x1, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xe0}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0xa8}, 0x20024000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r4, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x2e5, 0x5, 0x0, {0x0, 0x800000, 0x0, 0x259}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f0000000140)={0x9, 0x3, {0x79, 0xfffc, 0xffff, {0x4, 0x692}, {0x81, 0xc9de}, @ramp={0x7, 0x2, {0x3f, 0x3c, 0x1, 0x7ff}}}, {0xfd, 0xf800, 0x8, {0x786e, 0x3}, {0x3, 0x8}, @rumble={0x7, 0xcb}}}) [ 378.022615] audit: type=1804 audit(1573468010.000:154): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802109239/syzkaller.ynBSNM/520/bus" dev="sda1" ino=17455 res=1 [ 378.093662] audit: type=1400 audit(1573468010.060:155): avc: denied { bind } for pid=15722 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 10:26:50 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') socketpair$unix(0x1, 0x8005, 0x0, &(0x7f0000000480)) r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800080}, 0xc) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1002000}], 0x1, 0x0, 0x0, 0x3f6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) fremovexattr(0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000640)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) wait4(r3, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x80000000000000, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000500)}], 0x1, 0x0) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/member\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000001840)=ANY=[@ANYBLOB="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"/4469], 0x1, 0x3) fchdir(r4) creat(&(0x7f00000002c0)='./file0\x00', 0x5) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) timerfd_create(0x2, 0x800) 10:26:50 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x800, 0x0) mount(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000500)='securityfs\x00', 0x91, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000001800000010005000001ffff006cfe00ffffffff000000000000000100000000ffffffffffff00009c9cc68e755f44b8d130590901f30c70692d115660c39d041d3ac1b3b8f5e701005da29fe17791720f7f8bac09de54b750544e02ddd970d1fbb476889df0a06758c59093c7dc2821a92e665df434982a6984f9c542f8fa9bb1ca90d376c2aeb4fad9cee1e3bdd924b48e373671d52a485ab2ecd812b89110df805bc4a1f1cc88c32f51b91a63546c87b5640567688e1045a5c1af6aed3c2031209369dd581152b4470340b808a4475ae576644ec9fcdc5a8d1ccb8791984b3f8c37f845f9bccc63546224c415bb78be82d4de6d8406c6799d0081b56b48719feddc95d1ca02c66ab3032de4c277f09693b9645ada795f50e0f6a85eae5de77a1a899403a4e50036d38e6de6875894d4781a08e8ed6ee33067160fcab63c8d629f06b4a48dcae345e425a033ddcb1fa628adb3121f03e628adc19c9c6b7aaac3d63da276edc460abebae9dc7d6a895e377388dda095516edec80e3f48bd7afc1e0eadd441a2de5ecfe3fd0b8284460b6cce085b20a9e10117e0190f51d47af75364000fabb503100067151ef1f0c807c12c61b3a9a79357a19fac82e4c6dab21b5e717cee9c941659effc91d2a9bdb1f4d0b2887ee2687b32411d4142773eedf96291b68f9e237153a7ca92582cc2490fbd7fc763ce7eb7b53376d6fa0eaff002faf92617c05a123d786bcb0b3d21abffe6220fd41a343e4"], 0x7a) io_setup(0xff, &(0x7f0000000340)) r2 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0x800, 0x8008}, {0x9}], r3}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) chown(&(0x7f0000000140)='./file0/file0\x00', r3, r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) readv(r2, &(0x7f0000000400), 0x0) fcntl$lock(r2, 0x6, &(0x7f0000027000)={0x1}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000540)) write$binfmt_aout(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="68cda47ff0440d85fb9bdc8dfa84fe06602672146be2dff0d996c561170092bf6166c800e81391fe910b2ca9ab1747dd5e469baadc3cffc1e45397f9f4d5dd45209955a6890209fe70c5b6"], 0xb) recvfrom$unix(r0, &(0x7f00000004c0)=""/62, 0x3e, 0x2020, &(0x7f00000006c0)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x4a, &(0x7f0000000040), &(0x7f0000000400)=0x4) sendfile(r6, r6, &(0x7f0000000180), 0x8000) ioctl$BLKROGET(r5, 0x125e, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000440)=@abs={0x1}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x0) [ 378.489210] protocol 88fb is buggy, dev hsr_slave_0 [ 378.513935] IPVS: ftp: loaded support on port[0] = 21 [ 378.586649] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1296 sclass=netlink_xfrm_socket pig=15730 comm=syz-executor.4 10:26:50 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) tkill(r0, 0x30) wait4(0x0, 0x0, 0x0, 0x0) [ 378.718934] audit: type=1804 audit(1573468010.650:157): pid=15717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802109239/syzkaller.ynBSNM/520/bus" dev="sda1" ino=17455 res=1 10:26:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}, 0x45c) [ 378.900181] ptrace attach of "/root/syz-executor.2"[15762] was attempted by "/root/syz-executor.2"[15763] 10:26:50 executing program 2: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501bfbd9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d890a676ec576e6002ca2d3e432b909916a7036c13c8b86314219123c233beca448dd9f82c124c794f7091e2b1023e629b02cda6d3ae0359817c5ad0ff74ed7d8973841c157945f7ea2aeba908227b92e995eceb6039d7a81bc3efc82e30d345cbc9a14e11dca36ea2ed921d3740210f66f32e73b897cca2b1550053d8a4cc76edbeb16e3e4fd678792d290e73cc1b159b8f5b611918c1f53a483c1cf0554189f553a670f26f34d544f1dea25724c7f895d2f1f1669c902e24d6169d941fbee0d1c74de251424cf0baac37166fc1ef3c64b249ddeff6800000000000000a8a659771063518b3662f3f5302710d05eacfb3b3a6933ff2c8d36d6845c4c8edc9b2bd23a102063b383fe7328b99a931709f5bd25ed6de179b69374156eb3796059c62a7eb4d97ff92d857bca588b346d6236eff570100de44d9aa028426c0e3f5f520146828235a44d9a0b6dff9e62ce9e7ece9a6cf7274707d91eecd0e182f01ccfdb821b0485628bde293216ad2747e0a28f1f13ddc06e1ebf39b35c6a32a9500a8bc4412d3776846c446026b2d9bc3a4880031ae62693e0f912a6cda6be5d81426b4b4047ac744eba243341e1dc08c6bfb99bac943fc81ce07ebe7697125b43d98e65e3fdd46cd80b44aeedeb1fab7a6234193e60c5a99cec324c73a9b4534c2580b5f07c6bc60514b3fb5dab1cd96d577ee53de89e0428924467e9668f7bf48a81f24cf3a48512180e59654a2fa99d958ccb1d7c6fe11aaf16"], 0x3c) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r2 = gettid() tkill(r2, 0x10010000000032) 10:26:51 executing program 3: r0 = creat(0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x200140, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) poll(&(0x7f00000004c0)=[{r1}], 0x1, 0xa4) syz_open_pts(r1, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) tkill(0x0, 0x25) ptrace$setsig(0x4203, 0x0, 0x80000001, 0x0) r8 = socket$packet(0x11, 0x0, 0x300) syz_open_pts(r2, 0x10300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x1}, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0xffffffffffffff47) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r10, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="af97221ee19635a8426fc41c6b1030778f861af9bbef00622e2148cc00000000d2ff3b9f9db5547d1c46cc1360aedbd29baca221bf3888f0ea0355f38dadc96963f0bce30afe2dea510000", @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=0x0], @ANYRES16=r8, @ANYRESHEX, @ANYRES16=r9], @ANYRESDEC], &(0x7f00000000c0)=""/28, 0x1c) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000300)) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) fsync(r11) socket$inet6(0xa, 0x100800000000002, 0x0) 10:26:51 executing program 5: ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffffffffffffb) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ecee8b1483f4"}, 0x14) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) [ 379.083560] input: syz1 as /devices/virtual/input/input27 [ 379.160102] input: syz1 as /devices/virtual/input/input28 10:26:51 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="f9", 0x1}], 0x1) 10:26:51 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000700)={0x5, 0x5, [0x3, 0x1, 0x8c, 0x5, 0x10000], 0x8b7}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.390830] syz-executor.1 D29464 15736 7591 0x00000004 [ 525.396467] Call Trace: [ 525.399108] __schedule+0x866/0x1dc0 [ 525.402838] ? pci_mmcfg_check_reserved+0x170/0x170 [ 525.408454] ? rwsem_down_write_failed+0x764/0xc30 [ 525.413411] ? _raw_spin_unlock_irq+0x28/0x90 [ 525.417925] ? lockdep_hardirqs_on+0x415/0x5d0 [ 525.422554] schedule+0x92/0x1c0 [ 525.425919] rwsem_down_write_failed+0x774/0xc30 [ 525.430722] ? rwsem_down_read_failed+0x3c0/0x3c0 [ 525.435605] call_rwsem_down_write_failed+0x17/0x30 [ 525.440715] ? call_rwsem_down_write_failed+0x17/0x30 [ 525.445905] down_write_nested+0x57/0x90 [ 525.450102] ? filename_create+0x17c/0x4f0 [ 525.454338] filename_create+0x17c/0x4f0 [ 525.458384] ? kern_path_mountpoint+0x40/0x40 [ 525.462948] ? strncpy_from_user+0x21b/0x2d0 [ 525.467363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 525.472927] ? getname_flags+0x277/0x5b0 [ 525.477044] ? nsecs_to_jiffies+0x30/0x30 [ 525.481252] do_mkdirat+0xb5/0x2a0 [ 525.484792] ? __ia32_sys_mknod+0xb0/0xb0 [ 525.488990] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 525.493779] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 525.499209] ? do_syscall_64+0x26/0x620 [ 525.503184] ? lockdep_hardirqs_on+0x415/0x5d0 [ 525.507759] __x64_sys_mkdir+0x5c/0x80 [ 525.512211] do_syscall_64+0xfd/0x620 [ 525.516007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 525.521231] RIP: 0033:0x45a219 [ 525.524429] Code: Bad RIP value. [ 525.527774] RSP: 002b:00007f677143bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 525.535525] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045a219 [ 525.542836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 525.550137] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 525.557428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f677143c6d4 [ 525.564719] R13: 00000000004bfbf9 R14: 00000000004dc2c8 R15: 00000000ffffffff [ 525.572022] INFO: task syz-executor.1:15767 blocked for more than 140 seconds. [ 525.579422] Not tainted 4.19.82 #0 [ 525.583477] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.591490] syz-executor.1 D28152 15767 7591 0x00000004 [ 525.597122] Call Trace: [ 525.599763] __schedule+0x866/0x1dc0 [ 525.603492] ? pci_mmcfg_check_reserved+0x170/0x170 [ 525.608509] ? rwsem_down_write_failed+0x764/0xc30 [ 525.613461] ? _raw_spin_unlock_irq+0x28/0x90 [ 525.617959] ? lockdep_hardirqs_on+0x415/0x5d0 [ 525.622592] schedule+0x92/0x1c0 [ 525.625963] rwsem_down_write_failed+0x774/0xc30 [ 525.630761] ? rwsem_down_read_failed+0x3c0/0x3c0 [ 525.635611] ? mark_held_locks+0x100/0x100 [ 525.640683] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 525.646235] call_rwsem_down_write_failed+0x17/0x30 [ 525.651274] ? call_rwsem_down_write_failed+0x17/0x30 [ 525.656464] down_write+0x53/0x90 [ 525.659981] ? lock_mount+0x8c/0x2e0 [ 525.663703] lock_mount+0x8c/0x2e0 [ 525.667237] do_add_mount+0x27/0x380 [ 525.670987] do_mount+0x160a/0x2bc0 [ 525.674617] ? copy_mount_string+0x40/0x40 [ 525.678851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 525.684413] ? copy_mount_options+0x280/0x3a0 [ 525.688907] ksys_mount+0xdb/0x150 [ 525.692474] __x64_sys_mount+0xbe/0x150 [ 525.696450] do_syscall_64+0xfd/0x620 [ 525.700300] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 525.705486] RIP: 0033:0x45a219 [ 525.708669] Code: Bad RIP value. [ 525.712054] RSP: 002b:00007f677141ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 525.719822] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 525.727093] RDX: 0000000020000300 RSI: 0000000020000200 RDI: 0000000000000000 [ 525.734383] RBP: 000000000075c118 R08: 00000000200005c0 R09: 0000000000000000 [ 525.741682] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f677141b6d4 [ 525.748946] R13: 00000000004c6d0d R14: 00000000004dc520 R15: 00000000ffffffff [ 525.756254] [ 525.756254] Showing all locks held in the system: [ 525.762627] 3 locks held by kworker/u4:3/755: [ 525.767199] #0: 000000002f091a7a (&rq->lock){-.-.}, at: __schedule+0x1f8/0x1dc0 [ 525.775432] #1: 0000000035d0f268 (rcu_read_lock){....}, at: __update_idle_core+0x45/0x3f0 [ 525.783906] #2: 000000009284107e (&base->lock){-.-.}, at: lock_timer_base+0x56/0x1b0 [ 525.792006] 1 lock held by khungtaskd/1037: [ 525.796302] #0: 0000000035d0f268 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 525.804957] 2 locks held by rsyslogd/7423: [ 525.809203] #0: 000000003beafb60 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 525.817087] #1: 000000002f091a7a (&rq->lock){-.-.}, at: __schedule+0x1f8/0x1dc0 [ 525.824681] 2 locks held by getty/7546: [ 525.828644] #0: 000000003e13ef9c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 525.836909] #1: 000000005f95c47a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 525.845884] 2 locks held by getty/7547: [ 525.849882] #0: 00000000606c7205 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 525.858145] #1: 0000000015ea04fb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 525.867026] 2 locks held by getty/7548: [ 525.871007] #0: 0000000023758672 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 525.879290] #1: 00000000faf26b11 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 525.888153] 2 locks held by getty/7549: [ 525.892178] #0: 00000000b6f53972 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 525.901263] #1: 00000000905766a8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 525.910172] 2 locks held by getty/7550: [ 525.914140] #0: 0000000074160997 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 525.922422] #1: 000000004a6f5b38 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 525.931312] 2 locks held by getty/7551: [ 525.935276] #0: 00000000e4f875eb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 525.943557] #1: 0000000068f615d7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 525.952468] 2 locks held by getty/7552: [ 525.956435] #0: 0000000079841a53 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 525.964708] #1: 00000000f01db558 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 525.973626] 2 locks held by syz-executor.1/15731: [ 525.978443] #0: 0000000000015ba6 (sb_writers#13){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 525.986475] #1: 00000000620b1817 (&sb->s_type->i_mutex_key#20/1){+.+.}, at: filename_create+0x17c/0x4f0 [ 525.996167] 2 locks held by syz-executor.1/15736: [ 526.001036] #0: 0000000000015ba6 (sb_writers#13){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 526.009158] #1: 00000000620b1817 (&sb->s_type->i_mutex_key#20/1){+.+.}, at: filename_create+0x17c/0x4f0 [ 526.018798] 1 lock held by syz-executor.1/15767: [ 526.023616] #0: 00000000620b1817 (&sb->s_type->i_mutex_key#21){++++}, at: lock_mount+0x8c/0x2e0 [ 526.033044] [ 526.034657] ============================================= [ 526.034657] [ 526.041719] NMI backtrace for cpu 0 [ 526.045353] CPU: 0 PID: 1037 Comm: khungtaskd Not tainted 4.19.82 #0 [ 526.051825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.061178] Call Trace: [ 526.063772] dump_stack+0x172/0x1f0 [ 526.067410] nmi_cpu_backtrace.cold+0x63/0xa4 [ 526.071951] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 526.076870] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 526.082143] arch_trigger_cpumask_backtrace+0x14/0x20 [ 526.087329] watchdog+0x9df/0xee0 [ 526.090825] kthread+0x354/0x420 [ 526.094174] ? reset_hung_task_detector+0x30/0x30 [ 526.099002] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 526.104531] ret_from_fork+0x24/0x30 [ 526.108288] Sending NMI from CPU 0 to CPUs 1: [ 526.112856] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 [ 526.113813] Kernel panic - not syncing: hung_task: blocked tasks [ 526.126537] CPU: 0 PID: 1037 Comm: khungtaskd Not tainted 4.19.82 #0 [ 526.133024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.142364] Call Trace: [ 526.144956] dump_stack+0x172/0x1f0 [ 526.148719] panic+0x26a/0x50e [ 526.151913] ? __warn_printk+0xf3/0xf3 [ 526.155786] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 526.160833] ? printk_safe_flush+0xf2/0x140 [ 526.165146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 526.170678] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 526.175666] ? nmi_trigger_cpumask_backtrace+0x16e/0x1f8 [ 526.181108] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 526.186553] watchdog+0x9f0/0xee0 [ 526.189998] kthread+0x354/0x420 [ 526.193351] ? reset_hung_task_detector+0x30/0x30 [ 526.198173] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 526.203703] ret_from_fork+0x24/0x30 [ 526.209114] Kernel Offset: disabled [ 526.212746] Rebooting in 86400 seconds..