7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="45b7157de995096900"/22], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x111) fgetxattr(r0, &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f0000001680)=""/158, 0x1da) 01:22:46 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) ptrace(0x8, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000000)=""/3) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/llc\x00') getsockname(r1, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x80) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) r4 = gettid() wait4(r4, &(0x7f0000000140), 0x8, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setregs(0xf, r5, 0xfffffffffffffffd, &(0x7f0000000340)="3bcc89e9f52ce80ed1cdb2e0961f7563ce32d3d3e495cffe231e5d52564991fe36f72271fb534193cc73ca71cf48aabdb5cd62b16e8cddfafed83c7b3a08d65159b5c30b2fb011dea28b7dbc90a421c8c422") ptrace$cont(0x7, r2, 0x0, 0x0) [ 656.960983] audit: type=1400 audit(1575422566.673:751): avc: denied { create } for pid=18401 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 657.029929] audit: type=1400 audit(1575422566.743:752): avc: denied { create } for pid=18405 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 657.108294] audit: type=1400 audit(1575422566.823:753): avc: denied { create } for pid=18367 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 657.134293] audit: type=1400 audit(1575422566.843:754): avc: denied { create } for pid=18367 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:22:46 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'veth0\x00', 0x201a}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x3ffe, 0x4) sendto$inet6(r1, 0x0, 0xffffffffffffffad, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr="ffd6f1b9201348544de96b337da295b8"}, 0x1c) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)=0x1) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000080)={@mcast2, r2}, 0x14) close(r0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2cb043680f20ddd60939"], 0xa}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) ptrace$setregs(0xd, r4, 0x1000, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$UHID_INPUT(r6, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006) ptrace$cont(0x7, r4, 0x0, 0x0) 01:22:46 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0xa4080, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) sendmmsg$inet6(r2, &(0x7f0000000f40), 0x0, 0x8000) sendmmsg$inet(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x604d044) sendto$inet6(r2, &(0x7f0000000740)="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", 0x139, 0x34, &(0x7f0000000100)={0xa, 0x4e23, 0x23b6, @loopback, 0xffffff99}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000005c0)) 01:22:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:22:49 executing program 5: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 01:22:49 executing program 3: r0 = socket$inet6(0xa, 0x20000000080002, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000140)=0x54) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000240)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000340)=ANY=[], 0xffffffffffffff42, 0x0, 0x0}) fdatasync(r4) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 01:22:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x40}) r2 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r6, 0x8004700d, 0x0) geteuid() request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x1000002a5) keyctl$describe(0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000340)='./file0\x00', 0x115240, 0x80) r7 = open$dir(&(0x7f0000001280)='./file0\x00', 0xa000, 0x0) openat(r7, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) io_setup(0x9, &(0x7f0000000440)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000031c0)=""/4096) 01:22:49 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:22:49 executing program 0: unshare(0x20000000) clone(0x600, &(0x7f0000000000), 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:22:49 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000340)='./file0\x00', 0x2e4e00, 0x0) clone(0x2100001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 659.860694] audit_printk_skb: 9 callbacks suppressed [ 659.869101] audit: type=1400 audit(1575422569.573:758): avc: denied { create } for pid=18436 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:22:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = dup2(r1, r2) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000000)={0x1e}) preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x4c000000) times(&(0x7f0000000040)) 01:22:49 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r1}, 0x0, 0x0, 0x0) keyctl$describe(0x6, r1, &(0x7f0000000080)=""/161, 0xa1) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x200, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x185) sendto$inet6(r0, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) [ 660.005679] binder: BINDER_SET_CONTEXT_MGR already set [ 660.047321] binder: 18475:18478 ioctl 40046207 0 returned -16 [ 660.071447] binder: BINDER_SET_CONTEXT_MGR already set [ 660.103060] binder: 18475:18483 ioctl 40046207 0 returned -16 [ 660.117159] binder_alloc: binder_alloc_mmap_handler: 18475 20fff000-21000000 already mapped failed -16 [ 660.128552] binder: BINDER_SET_CONTEXT_MGR already set [ 660.134315] binder: 18475:18478 ioctl 40046207 0 returned -16 01:22:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = dup2(r1, r2) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000000)={0x1e}) preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x4c000000) times(&(0x7f0000000040)) [ 660.151772] binder: BINDER_SET_CONTEXT_MGR already set [ 660.160142] binder: 18475:18478 ioctl 40046207 0 returned -16 [ 660.234752] binder: BINDER_SET_CONTEXT_MGR already set [ 660.241379] binder: 18496:18497 ioctl 40046207 0 returned -16 [ 660.252486] binder: BINDER_SET_CONTEXT_MGR already set [ 660.258420] binder: 18496:18497 ioctl 40046207 0 returned -16 [ 660.268070] binder_alloc: binder_alloc_mmap_handler: 18496 20fff000-21000000 already mapped failed -16 01:22:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001280)={0x0, 0x0}) getresgid(&(0x7f0000001300), &(0x7f0000001340)=0x0, &(0x7f0000001380)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0)={r4, 0xee01, r5}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000100)={0x2, 0x6, 0xc00}) r9 = creat(&(0x7f0000000200)='./file0\x00', 0x10) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000240)=""/4096) [ 660.280771] binder: BINDER_SET_CONTEXT_MGR already set [ 660.286742] binder: 18496:18497 ioctl 40046207 0 returned -16 01:22:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @local}, {0x300, @remote}, 0xa, {0x2, 0x0, @multicast1}, 'bond_slave_1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x210841, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000140)=0x2) write$FUSE_DIRENT(r2, &(0x7f0000000000)={0x60, 0x7559bee39acd3f9b, 0x8, [{0x0, 0x2, 0xd, 0x7, 'bond_slave_1\x00'}, {0x4, 0xc1ad, 0xd, 0x9, 'bond_slave_1\x00'}]}, 0x60) 01:22:52 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x3d, 0x100) write(r3, &(0x7f0000000300)="84b284c880f5d7eae953b828362fd46d82d249320916997783a3c906d47747f1e5136e6d9d98faf521e4f49616ae6f61cff19bcdbe0d7585ba5b0050bc6a84ec10b09d4b1d2c14805b8fa25b7172d68f5dca323d12363dc18eced4e00813f9d4d6e6a5a7e573e29b4b5cdc328bdb5fd1096125d6ded73f", 0x77) fcntl$setstatus(r2, 0x4, 0x6100) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r6 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r9 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) r11 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) r12 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r13 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r14 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r13, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r13, 0x40046207, 0x0) r15 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r16 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r17 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000740)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRES64=r13, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRES16=r7, @ANYBLOB="363c5fc5888d8b744b8db929dd2112b6d4", @ANYRESDEC=r8], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYPTR64, @ANYPTR, @ANYRES64, @ANYRESHEX, @ANYRES32=r8], @ANYBLOB="61a264d63aa543d7b52df64bd4de169cad8a2974c4be955d890d8d9767218a409d03d66734caa18b75654da20d6917e45abbc27f73565267e54994d9dce373395de102a60eaa9413557048101843e14e277a051a58b19da8139beb78d144d416c064773418dd4b081b5ee3e81aa98600c30e0b55fa1a4458c575e5997940a2c7e852119001692920b180fdccd0eceb61bc8c3c4ac7c0d50cd8e9bfefddf4b934036b0408", @ANYRES64=r5, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYRES32=r9, @ANYRESDEC=r11, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESDEC=r14], @ANYRESHEX, @ANYRESOCT=r12], @ANYRESOCT, @ANYRESOCT=r7, @ANYPTR64=&(0x7f0000000400)=ANY=[]], 0x9, 0x449d27bbdbe81e20) write$FUSE_STATFS(r2, &(0x7f0000000240)={0x60, 0x0, 0x8, {{0x74b, 0x8, 0x7, 0xaec, 0x100000000, 0x6, 0x1, 0x1ff}}}, 0x60) write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r18 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) write$binfmt_script(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xfffffffffffffee8) sendfile(r2, r18, 0x0, 0x8000fffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001fde), 0x4) inotify_init1(0x100000) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r21 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKFLSBUF(r21, 0x1261, &(0x7f00000003c0)=0x9) sendfile(r2, r18, 0x0, 0xa5cc554) 01:22:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 662.771987] audit: type=1400 audit(1575422572.483:759): avc: denied { set_context_mgr } for pid=18516 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 662.795674] binder: 18516:18517 ioctl 40046207 0 returned -13 01:22:52 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x10001, 0x20, 0x2}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 01:22:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000280)=0x58, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@ipv4={[], [], @loopback}}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) recvmmsg(r3, &(0x7f0000f61000), 0x3ffffffffffff07, 0x2040, 0x0) 01:22:52 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:22:52 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r1, 0x8, 0xffffffffffffffff) socketpair(0x8, 0x0, 0x0, &(0x7f00000004c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc0110646}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000bafbe1d7690125179941d17295cfaafe230b3228c9b2dbf4ab57b411bcb7627124896e3099622aa3d4252ca0544a6198c4f3e6bf598054b71041717ad70f81730406f1576a359d4581039ccfced2e3c01cedfde06f62bfc070ed330f02de1e562a", @ANYRES16=r4, @ANYBLOB="000200000000fcdbdf250600000008000400fdffbfff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) clone(0x68040000, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r5, 0x20000004, &(0x7f0000000100)={0x0}) ftruncate(0xffffffffffffffff, 0x88001) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x3ba}, 0x7) write(0xffffffffffffffff, &(0x7f00000001c0)="0b28cc24c02e0a60beeaee4184c6a6776fb33b209d88ed846a4e5bc6d1745ee84b636505e0022f31befe944fe80b6fae836a1a9d7009586d98473575fffbab9fefd872463bfb07534840ad1fc90d", 0x4e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDDISABIO(r7, 0x4b37) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x3) syz_open_dev$mice(0x0, 0x0, 0x20000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) [ 662.804240] audit: type=1400 audit(1575422572.513:760): avc: denied { set_context_mgr } for pid=18516 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 662.828282] binder: 18516:18517 ioctl 40046207 0 returned -13 [ 662.837195] audit: type=1400 audit(1575422572.553:761): avc: denied { set_context_mgr } for pid=18516 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 01:22:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0xbfe81db64e54a857, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setsig(r2, 0xa, 0xd) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 662.885499] audit: type=1400 audit(1575422572.593:762): avc: denied { set_context_mgr } for pid=18516 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 662.910154] binder: 18516:18517 ioctl 40046207 0 returned -13 01:22:52 executing program 5: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) r3 = timerfd_create(0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) r4 = dup(0xffffffffffffffff) openat(r4, &(0x7f0000000140)='./file0\x00', 0x43, 0x0) pipe(&(0x7f0000000380)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x101000, 0x0) lseek(r2, 0xfffffffffffdfffd, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, 0x0, 0x0) open(&(0x7f00000003c0)='./bus/file0\x00', 0x105400, 0x1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x24, &(0x7f0000000340)={0x2, 0x4, 0xd96, 0x20}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0x10, 0x8000000100000003, 0x0) dup2(r7, 0xffffffffffffffff) r8 = socket(0x5, 0x0, 0xfe) getsockname$packet(r8, &(0x7f0000000040), &(0x7f00000001c0)=0x14) sendfile(r2, r5, 0x0, 0xa5cc554) [ 662.938073] audit: type=1400 audit(1575422572.653:763): avc: denied { set_context_mgr } for pid=18516 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 662.962553] binder: 18516:18531 ioctl 40046207 0 returned -13 [ 662.974978] binder: 18516:18517 ioctl 40046207 0 returned -13 [ 662.991224] audit: type=1400 audit(1575422572.703:764): avc: denied { set_context_mgr } for pid=18516 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 663.019305] binder: 18516:18531 ioctl 40046207 0 returned -13 [ 663.028111] binder: 18516:18517 Acquire 1 refcount change on invalid ref 0 ret -22 [ 663.036174] binder: 18516:18517 transaction failed 29189/-22, size 402653184--7885431403142184960 line 3014 [ 663.048003] audit: type=1400 audit(1575422572.763:766): avc: denied { set_context_mgr } for pid=18516 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 663.048068] audit: type=1400 audit(1575422572.763:765): avc: denied { create } for pid=18525 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 663.107639] binder: 18516:18531 Acquire 1 refcount change on invalid ref 0 ret -22 [ 663.108407] audit: type=1400 audit(1575422572.823:767): avc: denied { create } for pid=18527 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 663.139944] binder: 18516:18517 ioctl 40046207 0 returned -13 [ 663.159690] binder: 18516:18531 transaction failed 29189/-22, size 402653184--7885431403142184960 line 3014 01:22:52 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r1, 0x8, 0xffffffffffffffff) socketpair(0x8, 0x0, 0x0, &(0x7f00000004c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc0110646}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000bafbe1d7690125179941d17295cfaafe230b3228c9b2dbf4ab57b411bcb7627124896e3099622aa3d4252ca0544a6198c4f3e6bf598054b71041717ad70f81730406f1576a359d4581039ccfced2e3c01cedfde06f62bfc070ed330f02de1e562a", @ANYRES16=r4, @ANYBLOB="000200000000fcdbdf250600000008000400fdffbfff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) clone(0x68040000, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r5, 0x20000004, &(0x7f0000000100)={0x0}) ftruncate(0xffffffffffffffff, 0x88001) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x3ba}, 0x7) write(0xffffffffffffffff, &(0x7f00000001c0)="0b28cc24c02e0a60beeaee4184c6a6776fb33b209d88ed846a4e5bc6d1745ee84b636505e0022f31befe944fe80b6fae836a1a9d7009586d98473575fffbab9fefd872463bfb07534840ad1fc90d", 0x4e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDDISABIO(r7, 0x4b37) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x3) syz_open_dev$mice(0x0, 0x0, 0x20000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) 01:22:53 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x3d, 0x100) write(r3, &(0x7f0000000300)="84b284c880f5d7eae953b828362fd46d82d249320916997783a3c906d47747f1e5136e6d9d98faf521e4f49616ae6f61cff19bcdbe0d7585ba5b0050bc6a84ec10b09d4b1d2c14805b8fa25b7172d68f5dca323d12363dc18eced4e00813f9d4d6e6a5a7e573e29b4b5cdc328bdb5fd1096125d6ded73f", 0x77) fcntl$setstatus(r2, 0x4, 0x6100) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r6 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r9 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) r11 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) r12 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r13 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r14 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r13, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r13, 0x40046207, 0x0) r15 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r16 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r17 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000740)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRES64=r13, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRES16=r7, @ANYBLOB="363c5fc5888d8b744b8db929dd2112b6d4", @ANYRESDEC=r8], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYPTR64, @ANYPTR, @ANYRES64, @ANYRESHEX, @ANYRES32=r8], @ANYBLOB="61a264d63aa543d7b52df64bd4de169cad8a2974c4be955d890d8d9767218a409d03d66734caa18b75654da20d6917e45abbc27f73565267e54994d9dce373395de102a60eaa9413557048101843e14e277a051a58b19da8139beb78d144d416c064773418dd4b081b5ee3e81aa98600c30e0b55fa1a4458c575e5997940a2c7e852119001692920b180fdccd0eceb61bc8c3c4ac7c0d50cd8e9bfefddf4b934036b0408", @ANYRES64=r5, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYRES32=r9, @ANYRESDEC=r11, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESDEC=r14], @ANYRESHEX, @ANYRESOCT=r12], @ANYRESOCT, @ANYRESOCT=r7, @ANYPTR64=&(0x7f0000000400)=ANY=[]], 0x9, 0x449d27bbdbe81e20) write$FUSE_STATFS(r2, &(0x7f0000000240)={0x60, 0x0, 0x8, {{0x74b, 0x8, 0x7, 0xaec, 0x100000000, 0x6, 0x1, 0x1ff}}}, 0x60) write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r18 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) write$binfmt_script(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xfffffffffffffee8) sendfile(r2, r18, 0x0, 0x8000fffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001fde), 0x4) inotify_init1(0x100000) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r21 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKFLSBUF(r21, 0x1261, &(0x7f00000003c0)=0x9) sendfile(r2, r18, 0x0, 0xa5cc554) 01:22:53 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r1, 0x8, 0xffffffffffffffff) socketpair(0x8, 0x0, 0x0, &(0x7f00000004c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc0110646}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000bafbe1d7690125179941d17295cfaafe230b3228c9b2dbf4ab57b411bcb7627124896e3099622aa3d4252ca0544a6198c4f3e6bf598054b71041717ad70f81730406f1576a359d4581039ccfced2e3c01cedfde06f62bfc070ed330f02de1e562a", @ANYRES16=r4, @ANYBLOB="000200000000fcdbdf250600000008000400fdffbfff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) clone(0x68040000, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r5, 0x20000004, &(0x7f0000000100)={0x0}) ftruncate(0xffffffffffffffff, 0x88001) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x3ba}, 0x7) write(0xffffffffffffffff, &(0x7f00000001c0)="0b28cc24c02e0a60beeaee4184c6a6776fb33b209d88ed846a4e5bc6d1745ee84b636505e0022f31befe944fe80b6fae836a1a9d7009586d98473575fffbab9fefd872463bfb07534840ad1fc90d", 0x4e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDDISABIO(r7, 0x4b37) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x3) syz_open_dev$mice(0x0, 0x0, 0x20000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) sendmsg(0xffffffffffffffff, 0x0, 0x4000) [ 663.558441] binder: undelivered TRANSACTION_ERROR: 29189 [ 663.573656] binder: undelivered TRANSACTION_ERROR: 29189 [ 663.628602] binder: 18568:18569 ioctl 40046207 0 returned -13 [ 663.648660] binder: 18568:18569 ioctl 40046207 0 returned -13 [ 663.660195] binder: 18568:18569 ioctl 40046207 0 returned -13 01:22:53 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 663.671678] binder: 18568:18569 Acquire 1 refcount change on invalid ref 0 ret -22 [ 663.681503] binder: 18568:18569 transaction failed 29189/-22, size 402653184--7885431403142184960 line 3014 [ 663.700904] binder: 18568:18569 ioctl 40046207 0 returned -13 [ 663.732456] binder: 18568:18569 ioctl 40046207 0 returned -13 [ 663.765792] binder: 18568:18569 ioctl 40046207 0 returned -13 [ 663.781340] binder: 18568:18569 Acquire 1 refcount change on invalid ref 0 ret -22 [ 663.790642] binder: 18568:18569 transaction failed 29189/-22, size 402653184--7885431403142184960 line 3014 [ 663.827860] binder: 18568:18569 ioctl 40046207 0 returned -13 [ 663.846254] binder: 18568:18569 Acquire 1 refcount change on invalid ref 0 ret -22 01:22:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e23, @loopback}, {0x1, @random="fe8719c177ab"}, 0x10, {}, 'dummy0\x00'}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140), 0xffffffffffffffe3) r3 = socket(0x18, 0x0, 0x3) connect(r3, &(0x7f0000000000)=@sco, 0x12) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x0, 0x80, 0x5) close(0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x6, 0x105082) r6 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)="09a8", 0x2}], 0x1, 0x80ffe) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x1ba, 0x0, 0x0, 0xffffff04) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r7, &(0x7f00000002c0)=[{{&(0x7f0000000080)=@nfc={0x27, 0x2, 0x0, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000100)=@x25={0x9, @null=' \x00'}, 0x80, 0x0}}], 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x1) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80005) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000340)=0xb84699fd) syz_open_procfs(r10, &(0x7f0000000440)='ne\x8f/ptype\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x73, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r11, 0x0, r11) [ 663.872694] binder: 18568:18569 transaction failed 29189/-22, size 402653184--7885431403142184960 line 3014 [ 664.354307] binder: undelivered TRANSACTION_ERROR: 29189 [ 664.367340] binder: undelivered TRANSACTION_ERROR: 29189 [ 664.376850] binder: undelivered TRANSACTION_ERROR: 29189 01:22:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:22:55 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 01:22:55 executing program 5: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) r3 = timerfd_create(0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) r4 = dup(0xffffffffffffffff) openat(r4, &(0x7f0000000140)='./file0\x00', 0x43, 0x0) pipe(&(0x7f0000000380)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x101000, 0x0) lseek(r2, 0xfffffffffffdfffd, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, 0x0, 0x0) open(&(0x7f00000003c0)='./bus/file0\x00', 0x105400, 0x1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x24, &(0x7f0000000340)={0x2, 0x4, 0xd96, 0x20}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0x10, 0x8000000100000003, 0x0) dup2(r7, 0xffffffffffffffff) r8 = socket(0x5, 0x0, 0xfe) getsockname$packet(r8, &(0x7f0000000040), &(0x7f00000001c0)=0x14) sendfile(r2, r5, 0x0, 0xa5cc554) 01:22:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x100) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) write$FUSE_DIRENT(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="ee5d01b05ad6fb67bc429da20827df33221fa87ef5c3db1e58743047bb9ce117ed3e0d2869504b61d26883d4e4ea71cdc8d707b1e705db74dd3fb4de3c", @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYBLOB="f748c4d39e574399068b438778acadf7a445968b6223de5483699f8f7dbefa91427f1627f6f32be3606c16c27745d2fcfab88d724386ea5ff5bd61e76642e66b88fa47dec192e90be0becae81b502cd26770f8ef1c51ec22a7e561815804dd9c9d8f3a4135993880e7e28eb30e875c79b09a0f61adff384c0bffe264f311e68751a0b1e51b1087871ae8", @ANYRES32, @ANYRESDEC, @ANYBLOB="9744ca45b50d35f7d53d545e210d478c2c332bf56bd79b338c52db46db04951c985b0f9e2695e67eba4a108564f3b19048de934e1cc47427906da215978c021e224883442f3901f825fa71ac86b2c7c805b6b0646211748eb4d63a1e364f87e7894c5418d11f37637e178519c3609349e0e163e984940fdb41f922c0f2480873286014863b6e221b415450ed75ed511c1421a179df645b4e1f2fa1ffd018fcf39d93e8922dea4c5546923f3f9cbf1cbd5b4ff228062ce8df5e386ce620bd90368a80b4eab48668807e585d38e21037320b58", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYPTR, @ANYRESDEC=r6, @ANYBLOB="b5399c481eec5585c524bd32bbc9807319d0f265f5b2810f02d0d661c8c14b5edc22581be7084c431670ba4e1a28d7c0e5e9870f3b4c88d80528a77ec8e2ddf7712ddd397195d150", @ANYPTR64, @ANYPTR64], @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64, @ANYRESDEC=r4, @ANYPTR, @ANYRES32, @ANYPTR, @ANYPTR, @ANYRESDEC=r2], @ANYRESOCT=r5, @ANYPTR, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES16=0x0]], @ANYRESHEX=r7, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES32=r5], 0x71) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r8, 0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 01:22:55 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) time(0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20008089, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @empty}, 0x3a4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000180)=0x80000000, 0x90) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x80}, 0x28, 0x1) ftruncate(r3, 0x10099b7) sendfile(r1, r3, 0x0, 0x88000fc000000) 01:22:55 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:22:55 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0xbf, &(0x7f00000000c0)}, 0x240400c0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000a4718a138a093376d9488ec1b50ca5afd66b2ec868f7860536dddee2fd"]}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x3, 0x7, 0x20, 0xffffffff, 0x40, 0x7fffffff}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) epoll_create(0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x40000, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x400, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e20, @broadcast}}}, 0x241) inotify_init() socket$unix(0x1, 0x1, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) [ 665.980854] binder: 18615:18617 ioctl 40046207 0 returned -13 [ 665.989265] binder: 18615:18617 Acquire 1 refcount change on invalid ref 0 ret -22 [ 665.998020] binder: 18615:18617 transaction failed 29189/-22, size 402653184--7885431403142184960 line 3014 01:22:55 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fallocate(r1, 0xb88163c91c5ba873, 0x2, 0x5) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x7b000, 0x3, 0x7, 0x7, 0x8d}) set_thread_area(&(0x7f0000000080)={0x0, 0x1000, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid/\n\x8b*\x94V9\xbc\x83\xa9~\x1c\x9f\x8a\x1b\xf7\xf8?\xd8\xab\x19cJ\x9a\a>Z&hR\t\xe9s\xd8\xacl}\xd6\x8e\xc3B=\xbd;g\xa9 \xaf\xc3(T?C\x95|\xa06.O\xf5L!\xf8J\f\xf8\xe5\xfe$\xdct\xd1\x99\xb9\xc4J\xa6]M.\xb1\x06rn;\xe1\xddG\xca\xd8\xea,~\xf3\xc95\xcb\"\xa7\xccv\xa3O\x90\x91\x80g7\xc26\xa8@\x8e\xb6\r\xb3k\xe3\xea2\xb2xO\xa0BEe\x83~\xae\x11U\xdbu\r\xb9r') [ 666.030878] binder: 18615:18617 Acquire 1 refcount change on invalid ref 0 ret -22 [ 666.046596] binder: 18615:18617 transaction failed 29189/-22, size 402653184--7885431403142184960 line 3014 [ 666.068423] binder: undelivered TRANSACTION_ERROR: 29189 [ 666.075007] binder: undelivered TRANSACTION_ERROR: 29189 01:22:55 executing program 1: open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x282a41, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="d7467fc12d1c6c5c52dc0300f40d46c2305b8ba5a7eea8121de1c9c8964b0a4ef1e08002bc145930df010000006637064d932f1a7049b65f814e234724642c9ed65b4837e470cdad479b77bf6fec1bde732359e1b0bc03c26e3e7000005c4209e35cdd95168dceeb2a7d2a1d925377b20088421726835254301891b4bfa09134766283237d580367de7d4361b4ba325b88cb8e6306c6c9d10f8dfee33239b8e91f9b8deeb7f3e28f8e4b1c9af8d65b98193b0d0c656fd913c2b8af8ee8ea53774090a35e304500"/216], 0x57) sendto$inet(r5, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffd) writev(0xffffffffffffffff, &(0x7f0000000880), 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socket$inet6(0xa, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:22:56 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0xbf, &(0x7f00000000c0)}, 0x240400c0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000a4718a138a093376d9488ec1b50ca5afd66b2ec868f7860536dddee2fd"]}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x3, 0x7, 0x20, 0xffffffff, 0x40, 0x7fffffff}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) epoll_create(0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x40000, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x400, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e20, @broadcast}}}, 0x241) inotify_init() socket$unix(0x1, 0x1, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) 01:22:56 executing program 1: open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x282a41, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="d7467fc12d1c6c5c52dc0300f40d46c2305b8ba5a7eea8121de1c9c8964b0a4ef1e08002bc145930df010000006637064d932f1a7049b65f814e234724642c9ed65b4837e470cdad479b77bf6fec1bde732359e1b0bc03c26e3e7000005c4209e35cdd95168dceeb2a7d2a1d925377b20088421726835254301891b4bfa09134766283237d580367de7d4361b4ba325b88cb8e6306c6c9d10f8dfee33239b8e91f9b8deeb7f3e28f8e4b1c9af8d65b98193b0d0c656fd913c2b8af8ee8ea53774090a35e304500"/216], 0x57) sendto$inet(r5, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffd) writev(0xffffffffffffffff, &(0x7f0000000880), 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socket$inet6(0xa, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:22:56 executing program 5: open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x282a41, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="d7467fc12d1c6c5c52dc0300f40d46c2305b8ba5a7eea8121de1c9c8964b0a4ef1e08002bc145930df010000006637064d932f1a7049b65f814e234724642c9ed65b4837e470cdad479b77bf6fec1bde732359e1b0bc03c26e3e7000005c4209e35cdd95168dceeb2a7d2a1d925377b20088421726835254301891b4bfa09134766283237d580367de7d4361b4ba325b88cb8e6306c6c9d10f8dfee33239b8e91f9b8deeb7f3e28f8e4b1c9af8d65b98193b0d0c656fd913c2b8af8ee8ea53774090a35e304500"/216], 0x57) sendto$inet(r5, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffd) writev(0xffffffffffffffff, &(0x7f0000000880), 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socket$inet6(0xa, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:22:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:22:58 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)={0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 01:22:58 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:22:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80800, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x4, 0x2, 0x2, 0x8}, 0x10) sendmmsg(r0, &(0x7f0000001d40)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e22, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001100)=[{0x10, 0x0, 0x2}], 0x10}}], 0x2, 0x0) 01:22:58 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x7) socket$inet6(0xa, 0x3, 0x8) sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffc6b, &(0x7f0000000440)=[{&(0x7f00000000c0)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023022000100000000d000500fc637400e34f040a1a3ad5570800c78b80082314e9030b9d110085b1766732009b84e7b1df136ef75a", 0x55}], 0x1}, 0x0) 01:22:58 executing program 5: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 01:22:58 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e27, 0x80, @ipv4={[], [], @remote}}, 0xb) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r3, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) fchdir(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r5, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:udev_tbl_t:s0\x00', 0x20, 0x3) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) [ 669.132070] audit_printk_skb: 45 callbacks suppressed [ 669.138239] audit: type=1400 audit(1575422578.843:783): avc: denied { create } for pid=18690 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 669.235192] audit: type=1400 audit(1575422578.943:784): avc: denied { set_context_mgr } for pid=18703 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 669.311152] binder: 18703:18716 ioctl 40046207 0 returned -13 01:22:59 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xaf8f3fdc2acc74a7, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x7, 0x4) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x80082102, &(0x7f0000000140)=r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x84050) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x3f, 0x0, 0x4, 0x2) 01:22:59 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0xbf, &(0x7f00000000c0)}, 0x240400c0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000a4718a138a093376d9488ec1b50ca5afd66b2ec868f7860536dddee2fd"]}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x3, 0x7, 0x20, 0xffffffff, 0x40, 0x7fffffff}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) epoll_create(0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x40000, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd146bd2a2aaf296fc06065048d7a084c6ff8dabad01b9c9aa773ae810086d7839a5956537934dc76751921d0a46dcd996ca1406a389d7f3d3066e90c4c8c418f5f31ba6df7fc6fc1c754648275fd0d0ad02995544ac57200b599e4d6c07e7ebb226d0eef38216969c64482c324891d08641a69e50900f42f2ac957690600e7d097246dd23efb1ca1959ff98dfb06ff9cc95bdfda4122daf19ed242031d878efca7a71ffb8a7a34f41a9a997d61df65da81e8638d661af70147c59e2791c4cb6aa48de7eace4606264406fdd103966aef9d58c364d0eb6023738502dedf39f81ee3bfa291faf90011b6c3d08d7d13c1479fe4fc8ab4a5f3d33e593ea7df03ccb63541cc12b406fb4719aa9213e4d5db4675643974fc1b89f48e88a0c5e5a61957605b70cf9f41fac11fb35c8e14c205c1b77e7365f47e78e233206e2582764b0ea4543910b9022cede582959e34fca8f63c8adac3a48919"], 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x400, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e20, @broadcast}}}, 0x241) inotify_init() socket$unix(0x1, 0x1, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) [ 669.611397] audit: type=1400 audit(1575422579.323:785): avc: denied { create } for pid=18723 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 [ 669.646220] audit: type=1400 audit(1575422579.353:786): avc: denied { set_context_mgr } for pid=18703 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 669.673272] binder: 18703:18716 ioctl 40046207 0 returned -13 01:22:59 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:22:59 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:22:59 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e27, 0x80, @ipv4={[], [], @remote}}, 0xb) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r3, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) fchdir(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r5, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:udev_tbl_t:s0\x00', 0x20, 0x3) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) [ 670.078038] audit: type=1400 audit(1575422579.793:787): avc: denied { create } for pid=18735 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 670.368858] audit: type=1400 audit(1575422580.083:788): avc: denied { set_context_mgr } for pid=18745 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 670.407160] binder: 18745:18746 ioctl 40046207 0 returned -13 01:23:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:01 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e27, 0x80, @ipv4={[], [], @remote}}, 0xb) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r3, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) fchdir(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r5, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:udev_tbl_t:s0\x00', 0x20, 0x3) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) 01:23:01 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 671.916554] audit: type=1400 audit(1575422581.623:789): avc: denied { create } for pid=18757 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:01 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 672.013979] audit: type=1400 audit(1575422581.723:790): avc: denied { set_context_mgr } for pid=18755 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 672.119453] binder: 18755:18770 ioctl 40046207 0 returned -13 [ 672.232148] audit: type=1400 audit(1575422581.943:791): avc: denied { create } for pid=18774 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:02 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:23:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xb}}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x2ef, 0x20004081, 0x0, 0xffffffffffffff57) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b08160df7db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ptrace$setregs(0xd, 0xffffffffffffffff, 0xc0, &(0x7f0000000080)="b91785f653630ed95a84b0bac380e9bbb43dbcb3fc22a13abddfb250") getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@local, r6}, 0x14) 01:23:02 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 672.592503] audit: type=1400 audit(1575422582.303:792): avc: denied { create } for pid=18784 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:02 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_int(r2, 0x0, 0xccd95757da94c57f, &(0x7f0000000240), 0x4) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fcntl$getflags(r3, 0x401) r4 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@sha1={0x1, "2aaf69fa8c241c1addf446b283c4f6fd83ddf716"}, 0x15, 0x3) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT], 0x17}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:02 executing program 5: open(0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x60) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f") write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46fda058645abbd11970ab4b41b9e5cef73af524f3bcb2b89d31fdcf4a1dae44fec532ec602109dc51008a0e3e3a7365951c3e9eddcc5c5b700"/77], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 01:23:02 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000001100), 0x11e5) setsockopt$inet6_tcp_int(r0, 0x6, 0x38, &(0x7f00000002c0)=0x100, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000380)={r1, r2/1000+10000}, 0x13) r4 = fcntl$dupfd(0xffffffffffffffff, 0x80c, 0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @local, 0x10000}, 0xffffffffffffffec) dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0x80) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x181}, "0f7ae695a4de4aac", "6190b4fe2d86f198c02e2ed863c41671", "451994d3", "7e4a19573d039713"}, 0x28) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0xa9b84df5a140059c, r5, 0xd756c000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) write(r6, &(0x7f00000000c0)="f7", 0x1) recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) socketpair(0x3, 0x0, 0x9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000200)={0x2, 0x4, 0x6, 0x2aedcd7c}, 0x14) 01:23:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xa1fb5000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="eeb2ea1eca9ff7575bd70e10d0515f04a124bd72e6c3a95954e7d4035930b566d9b57d45b97937884460d21d48132ef921f5b4ac9eb0cb46b69a03aa3711d7e1b1664f39a21264b29e64353d9b294ef116ffe3f269eacab09001fbe6e302ac74326bbb0216b6d12a5baa3904d8f5c50bf41c72e0250747", 0x77) fchdir(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB="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"]], 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x40, 0x0, 0x10, 0x0, 0x0, 0x2b6ca382eeac3c83, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7fff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5c2c370eceb8c8ca}, 0x200, 0x1, 0x10001, 0x0, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000040)=0x1) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x35b2, 0xe0b7}) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) socket$packet(0x11, 0x2, 0x300) 01:23:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) epoll_pwait(r3, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x4, &(0x7f0000000180)={0x80000000}, 0x5) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) write$P9_RFSYNC(r3, &(0x7f00000001c0)={0x7, 0x33, 0x1}, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000000340)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000400)=0x8000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in=@empty}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) 01:23:04 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:23:04 executing program 0: r0 = socket$inet6(0xa, 0x4, 0x69) setsockopt$sock_int(r0, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffdb7be, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:23:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xa1fb5000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="eeb2ea1eca9ff7575bd70e10d0515f04a124bd72e6c3a95954e7d4035930b566d9b57d45b97937884460d21d48132ef921f5b4ac9eb0cb46b69a03aa3711d7e1b1664f39a21264b29e64353d9b294ef116ffe3f269eacab09001fbe6e302ac74326bbb0216b6d12a5baa3904d8f5c50bf41c72e0250747", 0x77) fchdir(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB="d20119b608042096ea8e565a389d9ccbfb3f7bbb126cb77028ef25e0941d51d3c50ebaee70fd5b1b040d4673fb3d5c512e29a0796feaf58e5613be08ed3ddab63a60f796ed504c67e838eca77c26964561d36804c5857de76c7bb038a24b8932c31a9b00822ac74225686cbf18b5c131ba4a04afdeeee4ff57cb2ce6e068b1f1f95a02a0bb69fec6cb8bc5563312c664f8de04783adcc37137233f218e593cf08fc65355694a7da7698f75887007011960c90e7ec5ec701c75ec1aabd3e5b10b297c7fa4c84ba5487f2d685d5d90da5393d21fc44c7880bd384f6a579c9c1eb92730f1b0940243efbde2804cc6ac964d97a3952e72f1bccc7dbf8ed4f004bd44e39edd81dc2ebcfa4f1acc27fefb983e461815d66b99b1d6150ed50cce42ebf5d360a9d8a7cfa30dc6433b4431563782bf30a2a0500a91cc10983f6072cf62d59e8eb2d7fb7f73bf1f021f4f6a1306b0df46a6bbce19110e3b9e0fd68b62c214ff1fb434985646c18a198069eec0963a04c9eb4462216175c649ba300318c228752e685d"]], 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x40, 0x0, 0x10, 0x0, 0x0, 0x2b6ca382eeac3c83, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7fff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5c2c370eceb8c8ca}, 0x200, 0x1, 0x10001, 0x0, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000040)=0x1) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x35b2, 0xe0b7}) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) socket$packet(0x11, 0x2, 0x300) 01:23:04 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000001500070500e80000004c03050208030301", 0x15) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 675.004172] audit_printk_skb: 3 callbacks suppressed [ 675.015891] audit: type=1400 audit(1575422584.713:794): avc: denied { create } for pid=18844 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:04 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) pipe2(&(0x7f0000000040), 0x4800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socket(0x1, 0x0, 0x46) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xb) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r5, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in=@empty, 0x4e21, 0x7, 0x4e22, 0xff55, 0x1b, 0xa0, 0x20, 0x2f, 0x0, r5}, {0x36e4, 0x7189, 0xd069, 0x0, 0x100000000, 0x0, 0xde2, 0x1}, {0x4, 0x5, 0x1000, 0x3}, 0xdf25, 0x6e6bb6, 0x1, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x4d5, 0x1843be4fd523a303}, 0x2, @in6=@remote, 0x3504, 0x97c3fbb3b0c8a0ab, 0x1, 0xfa, 0x7fff, 0xeffff801, 0x2}}, 0xe8) write$eventfd(r0, 0x0, 0x1d5) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000080)) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [{}, {0x20, '@'}, {0x20, 'vmnet1#selinux]md5sum.'}], 0xa, "5eee5b1bf89653be9474187e6bb14a0a63d6d988e890d771ed0cd7fdd23c4007"}, 0x45) [ 675.072363] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 675.091592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 01:23:04 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0xe) fchdir(0xffffffffffffffff) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) getpgid(0x0) write$FUSE_LK(r1, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000180)=0x21e5, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x9, 0x0, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0) socket(0xa, 0x800, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r2, 0x0, 0x200, 0x7) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = open(0x0, 0x0, 0x1c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc409948dbe75120e7c0c9a652c357177effff00000000c10a8f3a698071025f284179f985740fdcef321084da05a16679f2c40c8d772c55928650553605215de51b0dea464666e0648e9ae02514690636d083b161c24e68fc8a9b9112d4000047f477724228c6b7", @ANYBLOB="2036c7ae852840b72e41020d8bf7545660f1680041636526ec9ee86edb16558064d1083fb034ea1c8286def836203c549c4a9840dd61bb952ea542c67806cea9f6c644cb51dd9be3900219f8f4f4a1da05807c12d8b8480c15dd9d9836f275dbb85973f9fca39f5d5133f5b50028cf2b7c1fe63948c4"], 0x2}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYBLOB="b88f5a0000d2f18c1f4da3c0cfecb52c87820000e1aaaba313358d42f8b81fda95e83eb1e183af83c0ce7d5a0d4ea909b1d89dbe5e9aad8dd46f387240e5f0f95fb7e7ffffc1b585", @ANYRES16=0x0, @ANYBLOB="84b11e1629355b65d2f590f402bd4e0177ad5bbe8d961effe2a5aa46c1afc51439496ee3f501413d333c29c6ab4d47b454c55f0a2c6d972a7c78611ba41932b08731936fdead433a75860336908c0047c08087e6d58b6a6958ac5be3a4a57ffa86b5e25592d443a2d8080001d2cae5f74f508a40ba6db57bb3c5ad91a917a3cd40eacb7871a6932e06e2c2e1"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, 0x0) mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r7, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 01:23:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xa1fb5000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="eeb2ea1eca9ff7575bd70e10d0515f04a124bd72e6c3a95954e7d4035930b566d9b57d45b97937884460d21d48132ef921f5b4ac9eb0cb46b69a03aa3711d7e1b1664f39a21264b29e64353d9b294ef116ffe3f269eacab09001fbe6e302ac74326bbb0216b6d12a5baa3904d8f5c50bf41c72e0250747", 0x77) fchdir(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB="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"]], 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x40, 0x0, 0x10, 0x0, 0x0, 0x2b6ca382eeac3c83, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7fff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5c2c370eceb8c8ca}, 0x200, 0x1, 0x10001, 0x0, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000040)=0x1) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x35b2, 0xe0b7}) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) socket$packet(0x11, 0x2, 0x300) [ 675.320297] audit: type=1400 audit(1575422585.033:795): avc: denied { create } for pid=18882 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 675.762814] audit: type=1400 audit(1575422585.473:796): avc: denied { create } for pid=18882 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:05 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt(0xffffffffffffffff, 0x1, 0xc5, &(0x7f00000001c0)="467eca580f225f90589ac6d2b56d1531b3088de40d74e2423f6dca495bcaf261454ec62b67393fa2d31d394d56553ecc4c11b533b3505e9c0cbfabeca685b77936c1ef12086b776e12d242a73dec19847cbeda90ef015ad22eb874ceb2659db37243f7b7f05a4e6d9e238fed003794e695e659187a8b0505b6071cf4ebb8ed2645524138b3db4b644de124fb8fd9ffba1e0f2b3cdbfdf050643071d8ed8fe83334c8e554dff1680d4c559219ac4771d1eb0ce462cae9f724e9856342095e52aa2f6afacf2287a1d7c9a03c5c28a54eb05d8ac68358519071d0076f3b0653f7c9dc49c70761bc145f3506564f53b18478317c", 0xf2) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="34a86a9ecfcaf8d806f3ecfb5ac9cfa6660a05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 01:23:05 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:23:05 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat(r4, &(0x7f0000000000)='./file0\x00', 0x28000, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r2) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 676.219252] audit: type=1400 audit(1575422585.933:797): avc: denied { create } for pid=18899 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:07 executing program 5: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x80000001, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x511000, 0x0) writev(r1, &(0x7f0000001100)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="f6e0658e955ed2beb635ebd7709be7203f0380f925d9f2a1e8455837715bda3a4b0864440b2fa1", 0x27}], 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000001140)=""/114) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000008, 0x100000001, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000012c0)={&(0x7f00000011c0), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x60008c0) ioctl$TIOCSIG(r0, 0x40045436, 0xa) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001300)='/dev/null\x00', 0x2003, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x208008}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0xa8, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7b0}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/self/net/pfkey\x00', 0x1000, 0x0) recvfrom$unix(r5, &(0x7f0000001600)=""/4096, 0x1000, 0x6001a063, &(0x7f0000002600)=@file={0x1, './file0\x00'}, 0x6e) r6 = syz_open_dev$rtc(&(0x7f0000002680)='/dev/rtc#\x00', 0x0, 0x80200) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000026c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = dup2(r6, r7) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000002700)) r9 = eventfd(0x80000001) flock(r9, 0x15) ioctl$void(r9, 0x5450) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000027c0)={0xa, &(0x7f0000002740)=[{0x5, 0x4e, 0x0, 0xb34}, {0x8000, 0x0, 0x7, 0x1}, {0x8, 0x9, 0x40, 0x8}, {0x6, 0xed, 0x0, 0x10000}, {0xcce, 0x0, 0x3f, 0xe5c9}, {0xfff8, 0x9, 0x1f, 0x3}, {0x0, 0x8, 0xf7, 0x9352}, {0x2, 0xff, 0x80, 0xbd2}, {0x8, 0x2, 0x2, 0x1}, {0x1000, 0x7, 0x1f, 0x5c37}]}) fgetxattr(r10, &(0x7f0000002800)=@known='system.sockprotoname\x00', &(0x7f0000002840)=""/172, 0xac) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002900)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$KDSIGACCEPT(r11, 0x4b4e, 0x15) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002980)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2026000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r12, 0x42ecf26f3a7fb99e, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4c000) ioctl$TCSETS(r8, 0x5402, &(0x7f0000002a80)={0x9, 0x7fc, 0x6, 0x401, 0x1a, 0x7f, 0x1, 0x1, 0x4, 0x0, 0x136612ae}) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/null\x00', 0x80000, 0x0) ioctl$PIO_FONTRESET(r13, 0x4b6d, 0x0) 01:23:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xa1fb5000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="eeb2ea1eca9ff7575bd70e10d0515f04a124bd72e6c3a95954e7d4035930b566d9b57d45b97937884460d21d48132ef921f5b4ac9eb0cb46b69a03aa3711d7e1b1664f39a21264b29e64353d9b294ef116ffe3f269eacab09001fbe6e302ac74326bbb0216b6d12a5baa3904d8f5c50bf41c72e0250747", 0x77) fchdir(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB="d20119b608042096ea8e565a389d9ccbfb3f7bbb126cb77028ef25e0941d51d3c50ebaee70fd5b1b040d4673fb3d5c512e29a0796feaf58e5613be08ed3ddab63a60f796ed504c67e838eca77c26964561d36804c5857de76c7bb038a24b8932c31a9b00822ac74225686cbf18b5c131ba4a04afdeeee4ff57cb2ce6e068b1f1f95a02a0bb69fec6cb8bc5563312c664f8de04783adcc37137233f218e593cf08fc65355694a7da7698f75887007011960c90e7ec5ec701c75ec1aabd3e5b10b297c7fa4c84ba5487f2d685d5d90da5393d21fc44c7880bd384f6a579c9c1eb92730f1b0940243efbde2804cc6ac964d97a3952e72f1bccc7dbf8ed4f004bd44e39edd81dc2ebcfa4f1acc27fefb983e461815d66b99b1d6150ed50cce42ebf5d360a9d8a7cfa30dc6433b4431563782bf30a2a0500a91cc10983f6072cf62d59e8eb2d7fb7f73bf1f021f4f6a1306b0df46a6bbce19110e3b9e0fd68b62c214ff1fb434985646c18a198069eec0963a04c9eb4462216175c649ba300318c228752e685d"]], 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x40, 0x0, 0x10, 0x0, 0x0, 0x2b6ca382eeac3c83, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7fff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5c2c370eceb8c8ca}, 0x200, 0x1, 0x10001, 0x0, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000040)=0x1) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x35b2, 0xe0b7}) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) socket$packet(0x11, 0x2, 0x300) 01:23:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r0}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r1}, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$negate(0xd, r0, 0x8, r2) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130003006900000000000000ab008048060000004600010707000014190001401000005068000000000000ef38bf461e59d7", 0xfe96}], 0x1) 01:23:07 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 677.886450] audit: type=1400 audit(1575422587.593:798): avc: denied { create } for pid=18918 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 677.926328] audit: type=1400 audit(1575422587.633:799): avc: denied { create } for pid=18918 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:07 executing program 0: fchdir(0xffffffffffffffff) creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/xfrm_stat\x00') prlimit64(0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000001c0)=0x4) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r3, 0x0) read(r0, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0xff, @local, 0x103}, 0xffffffffffffff97) fdatasync(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) [ 677.970682] audit: type=1400 audit(1575422587.673:800): avc: denied { create } for pid=18918 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 678.007083] audit: type=1400 audit(1575422587.723:801): avc: denied { create } for pid=18918 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 678.038211] audit: type=1400 audit(1575422587.743:802): avc: denied { create } for pid=18918 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 678.045115] audit: type=1400 audit(1575422587.753:803): avc: denied { create } for pid=18919 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:07 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @ipv4={[], [], @empty}, @dev, 0x0, 0x280}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) getsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:23:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000000040)=[{r3}], 0x0, 0x3f) dup2(r2, r3) close(r0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) fcntl$setown(r3, 0x8, r1) recvfrom$inet(r4, &(0x7f0000000080)=""/113, 0x71, 0x2, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) tkill(r1, 0x16) 01:23:08 executing program 0: fchdir(0xffffffffffffffff) creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/xfrm_stat\x00') prlimit64(0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000001c0)=0x4) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r3, 0x0) read(r0, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0xff, @local, 0x103}, 0xffffffffffffff97) fdatasync(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 01:23:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4400, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000040)={0x4b9d, 0x7, 0xf11, 0x1, 0x80000000, 0x8, 0x9}) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100000001]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b08160df7db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', r7}) 01:23:08 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="475d0f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:08 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 679.150808] input: syz1 as /devices/virtual/input/input49 [ 679.241253] input: syz1 as /devices/virtual/input/input50 01:23:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:10 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r4, 0x0, 0x8000fffffffe) sendfile(r2, r4, 0x0, 0xa5cc554) 01:23:10 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}, 0x10000}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r2 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x20000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x400000000088001) 01:23:10 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 680.977280] binder: BINDER_SET_CONTEXT_MGR already set [ 680.989707] binder: 18986:18993 ioctl 40046207 0 returned -16 [ 681.005528] binder: BINDER_SET_CONTEXT_MGR already set [ 681.020568] binder: 18986:18993 ioctl 40046207 0 returned -16 01:23:10 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}, 0x10000}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r2 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x20000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x400000000088001) [ 681.033391] binder: BINDER_SET_CONTEXT_MGR already set [ 681.040478] binder: 18986:18993 ioctl 40046207 0 returned -16 [ 681.083506] audit_printk_skb: 6 callbacks suppressed [ 681.104474] audit: type=1400 audit(1575422590.793:806): avc: denied { create } for pid=18989 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 681.109471] binder: BINDER_SET_CONTEXT_MGR already set [ 681.109480] binder: 19003:19005 ioctl 40046207 0 returned -16 [ 681.110219] binder: BINDER_SET_CONTEXT_MGR already set [ 681.110386] binder: 19003:19005 ioctl 40046207 0 returned -16 01:23:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x412004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000000)) 01:23:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8001) close(r3) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r6, r7, &(0x7f0000000180)=0x7fff, 0x4) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x20, &(0x7f00000004c0)=0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r9, 0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) [ 681.111313] binder: BINDER_SET_CONTEXT_MGR already set [ 681.111321] binder: 19003:19005 ioctl 40046207 0 returned -16 01:23:11 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x30e}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x5, 0x4) socket$inet6(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80001, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000580)) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffc) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000480)='./bus\x00', 0x151242, 0x1) ftruncate(r8, 0x2007fff) sendfile(r5, r8, 0x0, 0x5) 01:23:11 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r4, 0x0, 0x8000fffffffe) sendfile(r2, r4, 0x0, 0xa5cc554) 01:23:11 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 681.926480] audit: type=1400 audit(1575422591.633:807): avc: denied { create } for pid=19026 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:11 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0xf, 0x5, 0x7, 0x7f, 0x3, 0x6, 0xfffffff8, 0x334, 0x40, 0x195, 0x5, 0x6, 0x38, 0x1, 0xb, 0x3, 0x1}, [{0x3, 0x8, 0x2ce, 0x3ff, 0x1, 0x80000001, 0xff, 0x1}, {0x5, 0x9, 0x0, 0x81, 0x5, 0x0, 0xfffffffffffffffe, 0xa42}], "5a2d6e5666039b043ae574ce1d0115c25d35253cc35dde6fa21be278d29c4c21a9bc0a166f08141fc0a445e6dc3d60eeac7608ff1c7d1187ae1b0ea78d93e0a35880a48aac571400f34929e433adcc58feaffeee2a", [[], []]}, 0x305) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000001c0)="89bd134539f967eff7c1b989f8425a0fcdae87ec0306a97236b577af4956b3e6918e09cbe955dedb18d1bed79db97c2519cf4fd0927728f20f14be080686a75a6e4b0375fe9010a821b2b62d7c6aa750a5bc83623abb20a4003dacbca82091b1b0186e14e9daa7280a14388ba29f658c470ff79872ca8066267f47cd74d9af0d5f217227248188affba4359e3f30d4216c03f489e2b9ca3bd8d3d3d0a95aab6ee5137f81e96b9d2bd824f559d87f033bf36a6fc7cbba613b15") ptrace$cont(0x7, r1, 0x0, 0x0) 01:23:11 executing program 5: socket$netlink(0x10, 0x3, 0x4000000000000004) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x24000000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)=ANY=[@ANYBLOB="81be6470ed545b73bf844bd0b75c1b2c36a609f87e4cda3be78831a37faab95c065c8664d2d243946d9f077e48ea560d55ca4602c2e063129c4b7393b342a7500a1fce623fc3d1ea8cc5db9e6d5c4c0d32dc1ea19ff692a60ef33b342da8", @ANYRES16=r4, @ANYBLOB="08002cbd7000fcdbdf2506000000100001006e65746f657673696d000000100002006e657464657673696d30000008000300030000000800040001000000100001006e657464657673696d000000100002006e657464657673696d300000040002000000100001006e657464657673696d000000100002006e657464657673696d30000008000300030000000800040200000000080001007063690014000200303030303a30303a31302e30000000000800030001000000080004000200"/202], 0xd0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x100}, 0x4024881) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000140), 0x0) [ 682.166012] audit: type=1400 audit(1575422591.873:808): avc: denied { create } for pid=19036 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:13 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x267, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) write(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0) gettid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000001c0)) ptrace(0x10, r3) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000001c0)) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r4, 0x0, &(0x7f0000000000)=""/3) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000001c0)) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r5, 0x0, &(0x7f0000000000)=""/3) ptrace$getregset(0x4205, r3, 0x6, &(0x7f0000000280)={&(0x7f00000033c0)=""/4103, 0x9b4b8bf562da9df0}) ptrace$getregs(0xe, r3, 0x0, &(0x7f0000000000)=""/3) syz_open_procfs(r3, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r6 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) 01:23:13 executing program 5: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="475d0f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:13 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x581, 0x125) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) fallocate(r3, 0xa5, 0x1000, 0x2) 01:23:13 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2) mmap$binder(&(0x7f0000875000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x80000001) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x20000) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x1b, 0x7, 0x6, 0x907a, 0xb, 0x59, 0xff, 0x1f, 0x101, 0xb3, 0x6, 0x10001}) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6}) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7}, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 01:23:13 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:23:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:23:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 684.118938] audit: type=1400 audit(1575422593.833:809): avc: denied { create } for pid=19052 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 684.119506] audit: type=1400 audit(1575422593.833:810): avc: denied { create } for pid=19050 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 684.198891] audit: type=1400 audit(1575422593.903:811): avc: denied { create } for pid=19052 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 684.519444] audit: type=1400 audit(1575422594.233:812): avc: denied { create } for pid=19089 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 684.551075] audit: type=1400 audit(1575422594.263:813): avc: denied { create } for pid=19052 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:14 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:16 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) r2 = open(&(0x7f00000008c0)='./file1\x00', 0x20141042, 0x100) r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000040)}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000080)="4380d5ad5a0d4973c6b415b5ee8d2d0acb33b1bb29e5f864ea4b2b32ec2bef5b1fc95d8b74e921bb545889917fdcdf47e9a02803595aa4b79509df070b", 0x3d}, {&(0x7f00000000c0)="0c1a44a2e630b12ae80f2f6563977d751c25e69538b10329025962e821a4a3fe2b9824fbc2ee2f2c8b95dbc6891c975d3466ee91c417b853d37ebf48e3baa68fa4103073ce0dfa001a01b62703b0b022fe7955f4888842e21162aef9fdbe94a45b1e3144558ebf533ae3123e6d87eac34f2779417ef2338753de93daa5d575d749b02bcb13479264801a603879f601ff11328e22d92eda063bf0", 0x9a}, {&(0x7f0000000240)="a04d916d98b293d8b72614ce7b1e8b63c082d37e283d0d0da3a97d630767a2aefe869063d49c1db938a87b47f3344f62388035935d0b2b95b96b0f24fdb3d0cb2f0fdda9c43d4f895a8d77d58537baadeee9197c88ad2844df53bb3c4c24962d9560e7808b76debcfa38b25c4b1974f424a626d48124b0105a2accc854d80a49432bce0238c82db2c79cd093afd29f27786928444e672d37bff3c4b996242f27443d2b93af78dcd5f09132652d1dedfa414721ffaf04df5ab9b543f02950b960590abd4683165a134c874617064d80efa4123222c7148c532d38864646e0", 0xde}, {&(0x7f0000000340)="b37bccffb08c269b097122c3bb0609a3e45b33b3ccc2acee566f85ed073ade4dbe80e249fda52e3f0c132f33ff07a78de8bb91e76c6f09ce05da74778d14558ca5b1ca33f977", 0x46}, {&(0x7f00000003c0)="d04bc50b58362a2e423815397d871f0b5f66ca81e9e73a6f7f0db603d0c74bd21bfea3547f17", 0x26}, {&(0x7f0000000400)="612d8d643e78712977518da9d3771d80919133b0876b91023224b5a4b35202dcaf2198e60b205b59cc80dc4dab1061e9a6aa2e7fbe59cef180de0ac697764df602b4f4f212aa2c861bbfe2bfca17d388f1a2d9dc16587b481d4227a40b078b27cbbbb2d1367aa7263c4434292326dc543c4352ea0f0be39d52208fb350decf27e22d194f0b16758aa07aee6e2593a23ecb47c2d77a8359c31b210d6ad02fa3e7e2ba9175a3dfeedcefe20c9ec1b032896c63279ad0a6ee71703b150bea8e70bdf9373d862d71211e76de2dfdc63b3143dac22bc2fdc82140bd87b5fa9c3f4ff4d944757769e8", 0xe6}], 0x8, 0x10) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ftruncate(r7, 0x280080) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x45) sendfile(r4, r2, 0x0, 0x2008004fffffffd) 01:23:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:16 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:16 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) readv(r3, 0x0, 0x0) inotify_init() r5 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRES64=r4], 0xc48cdda8f58727db) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r5, r5, &(0x7f00000001c0), 0xa198) recvmmsg(r4, &(0x7f0000004200)=[{{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/55, 0x37}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/37, 0x25}, {&(0x7f00000006c0)=""/189, 0xbd}, {&(0x7f0000000780)=""/208, 0xd0}], 0x7, &(0x7f0000000900)=""/214, 0xd6}, 0x27d6}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000a00)=""/193, 0xc1}, {&(0x7f0000000b00)=""/217, 0xd9}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/30, 0x1e}, {&(0x7f0000000d40)=""/79, 0x4f}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/62, 0x3e}, {&(0x7f0000001e00)=""/220, 0xdc}], 0x8, &(0x7f0000001f80)=""/120, 0x78}, 0x6}, {{&(0x7f0000002000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002080)=""/169, 0xa9}, {&(0x7f0000002140)=""/38, 0x26}, {&(0x7f0000002180)=""/248, 0xf8}, {&(0x7f0000002280)=""/127, 0x7f}, {&(0x7f0000002300)=""/247, 0xf7}, {&(0x7f0000002400)=""/92, 0x5c}, {&(0x7f0000002480)=""/233, 0xe9}, {&(0x7f0000002580)=""/173, 0xad}], 0x8, &(0x7f00000026c0)=""/184, 0xb8}, 0x1}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002780)=""/128, 0x80}, {&(0x7f0000002800)=""/145, 0x91}, {&(0x7f00000028c0)=""/253, 0xfd}], 0x3, &(0x7f0000002a00)=""/176, 0xb0}, 0x6}, {{&(0x7f0000002ac0), 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002b40)=""/1, 0x1}, {&(0x7f0000002b80)=""/87, 0x57}, {&(0x7f0000002c00)=""/141, 0x8d}, {&(0x7f0000002cc0)=""/39, 0x27}, {&(0x7f0000002d00)=""/210, 0xd2}, {&(0x7f0000002e00)=""/130, 0x82}], 0x6, &(0x7f0000002f40)}, 0x8}, {{&(0x7f0000002f80)=@x25, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003000)=""/205, 0xcd}, {&(0x7f0000003100)=""/137, 0x89}], 0x2, &(0x7f0000003200)=""/4096, 0x1000}, 0x42bd9ca6}], 0x6, 0x4001a0e0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'syz_tun\x00', 0x1000}) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffdb4}, 0x8, 0x0) read(r8, &(0x7f00000001c0)=""/128, 0x3ea) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, 0x0, &(0x7f0000000340)) fchown(r8, 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fb840081d02addcbb41d6da7aa1d44a0ba1dad6ce7dfb31d418c9b3e411509d20a75e4719dae007a1a3aa0c74bdfab649d0500b2951af4ddd0364273a328a432d6508061bf869795d03ce9cc09e022fbccc6623435ae26fbd081f8733d019ec072a011e85e06c50000000000002a87191a0d317afbb49b7ca3f8079314c88afa64ae3ff635c06635d86bbbcc2ec578c1d42b21f443db6abe"], 0x1, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) gettid() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x2b}, 0x2c) 01:23:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r4, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x4, 0x3) write$tun(r7, &(0x7f0000000580)={@void, @val={0x0, 0x3, 0x8, 0x5, 0x1, 0xe5c}, @ipv6={0x0, 0x6, "ac2685", 0x35e, 0x16, 0x80, @mcast1, @empty, {[@hopopts={0x62, 0xd, [], [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @pad1, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @local}, @generic={0x1f, 0xf, "6f5547d934b5a3f70232e95032899b"}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @mcast2}]}, @fragment={0x67, 0x0, 0x1f, 0x1, 0x0, 0xe, 0x65}, @dstopts={0x39, 0x3f, [], [@generic={0x1, 0x89, "b82a7854711c53964f44180b496fc3033e98101a2f3dd7bda51fb0d84f875f3372c605ebf64fdeeea1df8cba1eaf9e61d22099d9e266f26820dc140cdb84e7ab423a1138e23a777824a3a336f3d1ab15516a9a6d9f15470006d2c2250599eec18f2aaef2fc8093c11f092a1673d0d31e7cd6024c8fdeb697993bf7f90be5ddda304908be3f4f25b6de"}, @calipso={0x7, 0x50, {0xd7, 0x12, 0x8, 0x3f, [0x7, 0x2, 0xdd, 0xfffffffffffffffc, 0x8, 0xfffffffffffffff9, 0x3, 0x5, 0x7fffffff]}}, @ra={0x5, 0x2, 0x200}, @generic={0x6, 0xcc, "c8be3be34811f55a06549fdbbf56551db1f31178d9c01a95db9c5dd4f08e702259bee4ff03fa97a750f221d26f00a7953e840b8bfc7fd09973e79cbf22f305c6a9ff735a8057ce71e866ae7d668d1f152363fc49e228f1b5cb683fa5949752d0b543a5eb3981835ced4195735feccf2745bf6ef65bd1acc2d5047078abfbade66e6c1363578c2796a890f2026d4405e2d05676ba06d48700495c7109e0797cf59a2b63b3db60df5f9f214ef95958caf2c4c17ea76e1d78ff83b476e4851a79ad56431360fa28617724eba65e"}, @calipso={0x7, 0x48, {0x0, 0x10, 0x80, 0x40, [0x3f, 0x2, 0x3, 0x80, 0x7, 0x10001, 0x6, 0x9]}}]}, @srh={0x11, 0x6, 0x4, 0x3, 0xaa, 0x20, 0xf9, [@dev={0xfe, 0x80, [], 0x26}, @rand_addr="8bd311d0ba823fa3cdb3cecd8d44b60f", @ipv4={[], [], @empty}]}, @srh={0x2b, 0x6, 0x4, 0x3, 0x8, 0x5a59afb701b217b8, 0x5, [@loopback, @loopback, @dev={0xfe, 0x80, [], 0x27}]}, @fragment={0x88, 0x0, 0x4, 0x1, 0x0, 0x5, 0x64}], @tcp={{0x4e22, 0x4e22, r8, r9, 0x1, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x3, {[@fastopen={0x22, 0xd, "94a4464a48dc0617eedccb"}]}}, {"6a392c50de3c6f372f0a323f2c2ea3ae162781a62bef96d93792560221862d058c0332e1a74f6ef0409ca2e343debffa8b3826bff7a2495481e6"}}}}}, 0x390) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(r1, 0x4, 0x44800) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) 01:23:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 687.043171] audit: type=1400 audit(1575422596.753:814): avc: denied { set_context_mgr } for pid=19128 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 687.065337] audit: type=1400 audit(1575422596.773:815): avc: denied { create } for pid=19119 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:16 executing program 0: clone(0x8ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$smack_xattr_label(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)={'eyz'}, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) request_key(&(0x7f0000000480)='user\x00', &(0x7f0000000000)={'eyz', 0x2, 0x74}, &(0x7f0000000540)='\x00vwx\n!p\xdd7\xb8\r\x13\x12\xe5\xec\xc1\xd5\x95bBS\xd9\x97\xdf\xdd\x05\xf8Q5\x1c\x9f\xcc\xf0\x86ax\x86B\x194\x04J\x94\xfa\x9dt\r\xb3-c+/\xc1N:[\xe6(\xca\x8a\x89F7[\xfb8\xba\xee\xe7Amqe\x04\xc6\xd3\xdbT\xb0R}', 0xfffffffffffffffb) [ 687.102159] binder: 19128:19140 ioctl 40046207 0 returned -13 01:23:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) io_setup(0x7e5d, &(0x7f0000000040)=0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x4800000000000000, 0x4000) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x21e}]) 01:23:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x4}, 0x28) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffc7e, &(0x7f0000002540), 0xe6}, 0x40000) bind(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) recvmmsg(r2, &(0x7f0000000100), 0x400006c, 0x3a, &(0x7f00000001c0)={0x77359400}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) epoll_create(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:23:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:17 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:17 executing program 1: socket$unix(0x1, 0x2, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setparam(r5, &(0x7f0000000140)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x11) fcntl$setstatus(r6, 0x4, 0x6100) set_tid_address(&(0x7f0000000040)) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xfffffffffffffffe}, 0x50) sendmsg(r2, &(0x7f00000000c0)={&(0x7f0000000400)=@rc={0x1f, {0x5, 0x7f, 0x8, 0xfd, 0x5, 0xc0}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000480)="29aa7ed0e60f738028c53a7ff63b59cdc79102dfaaae7410fd86fdbf3a0dc2930038c713b64ba324bd6d1934663cf8282c74812e765b7b2fe87bef5954d4b7291d41afef79be85fad070c1f84981bab592f1de7b0c23db597a815c2d8945050feb370fce3db80368ad0c42257aeaea951b2aa6d484ada45216e2e47e20b69712ec617ead54c79e1acd8f2ff1ee444fc4650d3ef67afd79d0f9653d6d49bd7acc683e60ff200b16075c6c65298e9a6194", 0xb0}, {&(0x7f0000000540)="451ad016c62ac5ea719e4c3dc8d964d098a9ace483f2b764fc9d529a5032bbdd1befd3530ef35fb41bed6f5d96975edeeea9b552bb3c12359b7cac36970c44443ae3217ebf20ea5461035e28fae36588fee01e8d3b7aa5922b3824aaca991f99204d8d86c82e818d8f212c14cf3206d30f4d950db29ef952edf7d5549fa5c04fc7e8c58f44d85d1c0fe07a03e516ae0b76ec60d5ec8311bb44f7bdd94f51de4239adcbd8574b53e332a63476fb44f2f901defd809222a168d7f842644b464cd59164723f3e41355565a02e6166a4cf85d4fe4049fd5eb9e8db10eca5bf3dca4f191f4e56ea0100dd18d241fb384a9d8ba757", 0xf2}, {&(0x7f0000000640)="8585d10d23aa80d871dc67980797c91121f537cca27cfebc89ee05b257fc06360e43a98a674ac0d713af475f608cd8558a5506351cfa17ba8d4220f53aa63731d04af4d324661cd42add3e67e9d6ebb001dcd3fb358be4440d33ac8bb965b1b1fcff92d1e9f3b1bd7520eb25295c1731f5e0a95ea1806ac464f58da8d5b961f54e0a992bbcf115b34e41c6e1b21507cebf4350ad126a4915ee", 0x99}, {&(0x7f0000000740)="faf117dc1bb4ece5de182ddda38aa5fcc5922c51aebb0d630f6f6d03fad0ae2849204b011c85d3d96dff023d8c47d2a4b0520d7d192060a2e4bbd665830e5f8cdd0797fdab5b6abba298568edb25fefb307a7031794e133cafc815c301ecbac8d7a448275bc2f9269a8cf78d29291998cb327f651ae1b25a5228b96c1081aba4500b00761d641ab2b68d1219e72fc3895ffb4f1c18f3c2c941ff5cad38925d9c26ffa6a5e4ba47f4796bbf7dc7cc399af2b47730970db73e919e3284138bdd5f72ffde471c66066295971f3ec0ff78c75bcf2bdc76e670301d27bc8b2245b894d10edf0ae85adc47", 0xe8}, {&(0x7f0000000840)="9c8042117d7b28c854540326879a1a87ad112c30709604d043e1f4dfcc5a4801565a3244a90a79b138c77016ef43071210432c89851b53cda7f640e64688b93a072294f0fcb6cfe97a83a915f40682cf34445f571f3abd04ac776c0e5778395a7b25d2d547516c4c705bc86b4b35a57d6d3ce79cea5c0567f44334920bfa891767a143266793b0fc947a3ef59f5b10883b80232af7964bc5a20683b9ab9db77400b8e6120f17904942ab72cabae018f3b6e96c04c1caa9f9add500ced2b5e7be9a7888ab7cea7de9a8a6c1d21a3575a3091b537490c1dd4dfcb6681bdae81176a4617a23e4f73b10003c5433a8de9453a92dc6b2d0c461063a1f2071d77bdeffd03a6aa41921aa636a5fef8ff841c8f65edfa1374b24b259989e49d64aedb7eeb28a5094194682b4d11fb5f014573e8d0e8906bdfe0ebb2aad375a41ffe2f5c587302e51b3e23284c387a09e88c6f27e9ffcb03cc6b617c538851dd5d1e61b351d760b410934418cc3f0c71a20c2c24f4986ebbbd0396949672447ad4964628321f8e2e4617c895615af5198a27a688c12384f6c6f88dfb2181a4e18629f5d4e158352c7da4aa3c8dfc366269e66731cf70e1772ef17af8ef59e162e6c5337a6cfdce767343c3ada72fbe93d7d9acbaac0863250832133a4446a9fe86da62d03cd3234eb3fc3404267de68c26e03a27d87250c1f74f0f7b22d645706ea35f0ad3ad9f04f11cc137d1e2ee2e9b2d6d88b38629806ca18c84f4824a6e309640045be2b193c2a009be3f0a6568867e8203b013d67af061825c9d138261786ac767d4e0e02cd18ce3a97a194a78b5e279e80e7cde9c323c1c13d6d1d63e74ec4978fffe10d2db8ee7e6c193baba46feb6ec8474aa77bd80e05856db8cf947469c418a97bcb94c54aeaa211d83a36f0517673c64d8168ffb44a304d569697205cb56faea7294c233f715935c22f431ee56e929375da7201984f50404bd1bd9ed8c1ef42c9e45ec45c631fe9bd09616312d1a5e3b678d1c339a42f1ea78ef43706b2334b03ac99e4331dc71f83603e447e2f6983f05d2c818a89e348eb98145f2677a2356d381c37043a3a5ea02f12e70329a796a7ddb21abac5c0531ffcb49f99957203c00d14f1470270f60af7c1197f070a60119fa9fd084d989959c23170795fc59c7c614ca642282505256ccef51aff1faa14c0d2917ad475b7c1057f063c276ebb517203e4ce252c9c5cad5c2917baf66fa01959516b48170b6312f59227da205297dec0c25ac3d6a522a8e4ebb2f7d3a2af39c9a3817598d96b193a19e516fea4f49f354a32390db7eef41e5e13db546b5ee3ef023b04a9df52970129391b8c099eb6e4a6432413400765f28061270a752d85b4982ea6cb43316a52c5c695f29dc69ada4e4c90b9de6f3f306fa092c56b9b701c22c3e636e16d9bc2dda1cc44ecd6b73777255368a6af11367ad3426eb14ce02834e6932fd874ce9b651faaf8837e0e11ee559538bc3d5c7a4f6b4455f93511903624eb47db95f364674682d53c94fdde6d3e4bb476021b313413f7e6eaa99bd53c9ef4568a5d2c5604e6c83af89a64d29ea5f8f2a499abb756dfc85fd153583c1cad1e6e514340b7c02a5c782188dc4359ed4e39bd61eb7addb262db5eba47e5d9e724940fcb392e90622f45e1a47d5297de19162c81f67862b765fdcc8db8c3f70c6fa72b1ad643e2f5a2da35798c9cdd81a71ee48bf707ed980262d7b01a8ff2abc891cc0f9bda5c4479d08540c24aff82d0b7a37e675ba43c3a5b401f2e9a8f987cde0f74075f8c240f416c95e7935c931d1bf811b0baa84c3460b9c648b9cfc67593b4786db00e3cc2843895aba48497057cece1d532ad36c48daffb50d24b9284b4e04a319481029f8f59a5cff5c454eb0bca3bd437e297af06c59ac17f68f62194a00e167b57acb62c5422c6d2da76d852f7b96f13592d8d5fe1d64c7e8c64664c11a04e4a51eb51cb20de674a841e1e147848045936c834bd8ac132d94ca685e79280925cf33d77ff57c006ed28020d2aba7b992e499082da5aa2760fcc6b53d1d83101fdb58926204f3e919c911c380c03d977ff5a9dec127a4fd3dd072698b282f780892ec7b854fab671ddeab5826db375f4878d54171b80bf0966cc741aa923bdb88140ba3bde50df5478cdc8a634cd0493657267787ba05084eace613cfc6e9012daf3c3d93dfe70aaeffcf4dab69a1a6aed11354638b2be4a43d22b6349ad57349bf9432961534ad59e1edc4c62231f7ba03414c70a2ac9c2f1b8aa8acd7866feb2d9afdc9cdc7dd138a4bc5fc743b145914f9a1b6779344bfab96da6b1c7c654d432032610ddf0e83bd4229d22896e1b9eb695414a01316f9e6e7065f9aa6cad6ca0b99d7152879f9f17975bfceaaeb1c76fea2362a9f395438c1d599787e6d29e1511cb7b75be7515b4c55df86b83e957dc7de9f773a87bad4aaf8a8a504390382ab7150d9b56932ccb555f56146d715e3c91a3170e419c4ac40e4a9238eda484e9bc9af9c0fd11a144e58a462b1a351a38a6b8076b08a34b853c6fd14fa347755b1541aef42cec626b767f21876598ff72f526b1ee18009d9ac485a6c635f4c7328a06cc79750849c6a2e306c715b2d8d7339f698082e464369bbb5cd72a7f07c4445533a0125d1e84d6c683de2920a7ff0d0f96622537a1fe1a4f1340b06153cd121e53fd25d8d091bfe992939cf9020bf691d60b2dc234ce58d67d6dba039ca055259bf0d02634f25a7b30357ea3900450bf630b13060896392bfb0b002a0973251778856fc66fba646f5050f6f92ccba271ad51c23d01791a116f99b9ce3a432e4909d6dbf2ffcb68c303d2559dc6015e74a0cece30dfd3503df2d6a6c9659cb490fad7152ec44dd138040ed21ced156c97f49c360dde0c98b663782c18eaa35fc70846fca53467be4973abc6a2a2124728bcfdc70af3880328011808efc6c72b4a20675ff6ea531d32391bbabd811b49a6868b83dbd5bde14c07c38096f3931311f049d4fbb12dddcf88606a90f26f3dbff68425fd2b7fc1d23413f004146ad84b0e060d143395d8d0e92dab9e7289134ad1114869abfbf50897e9c738f2463458e520e1cce1101abbfa9de95b38b168605064b3c2dfdf7c27f49734307d40e0ec9ce1dd4babc4f5016ead509279a38e8c91acd0697fdc60163716a5ca2c2ff2b24e9d3afd1224173d9adeb45884d085794a3a4679617031616d6f80c23d7f9fd0c6276e6d48762f4d27a0886d384fbf1739ee6d59bae1a669bfeae07031ffe0e70cb3114cc2a36a9022e66183f4688c563bb0c1aaf0e3f2489ab63bfecd592854c31290f4d649e85a3c6f8a672b586a43596103aabbf99db06a26c03fa63eb54367849d241fba48287821f99acf9a4b1b7df9ec2080ee9caf1f2ba8e0eb08b1ebb323708768a1ffe35a9aabf0770a9189392707aaaff81b7f971f2272d0fd90dfc3461a92304edffbd0ad9ba01026e59dd8670546037dcc7793251df11f7c079c0062c2d147b5a5ff051eb8db2f8b50764fc2187e4ac61309411f0fa4608bc2e28ab785a0fb3ec6f2a9d30fa8d623c1c9be7c606ecb6afa94ab55e151f9daf5206a1b617a6bbbec6297ec1310c68e3f02dcd92e770481a22b5828cb92e15e67379da9b4dc131f51f6b9b5e40c3cd3708d39cef113c6ddb4d929dcb59cc723b1962c17a3c17558a7f61aef5302002bcdc823914370c72687da31e338ef03e0e9651b6f8fc8f78d31a2be3c42ad5412d5aadf9e917b30b771aba0a439e43e2e6153617a9f21883e380f5ae5ce4af232306de97b2e64106cca00fb638972b8a255b1f1991df1fecd2a549b51dca38e19a4166b4721ef50119be6bf50448f342338d6e7ad63b773e04d54d8fdb50f605c3bfd202560ed510888da13f622cd4608d65e7d5dd64b142397fd36ecbd822e73d694f4d221319cf0475edc710c02ee0a7ba7e9a048417ee626f43294b01902623a45841ddd405ae8e3e0f9cb1c9050a77bdce3b925d93bf98311d8a9ba44356febf9e46d1233b97335880d5e80113c2e86bf2a73cc0337dd1a4fb7dd343a6c4c9cfcd072910532a7ba15669bb191819ffc93f091ff8be7f774af7bb951713ec3f7235388c84aaa9df6f18d9eac74ac34fae25df1ea531f9b48939201282e4dcb859d0422248f047a87d2c695e49ba31b87f3807a6f04aef9c6077085cbb5ca22e6af12f543d8eb9b7d947b5b9083e2435d0b9a086b41aa98391307b9eb14297f3eb6cfd4cde3a6108f6c8080dda1171148ef2090adc88f50ece274bee799d7d7921086850886442fa32e1c595f8d7fbe539ada0e65517f7bec170c78121c29d4a8530eeee64bbf4b5eb9194f85cf9509fe3ba846ef24f500e7e9feb2a74c1ba01eca9efb38709f4f02c430e84d1acff85175b06a0e0d727f66df5c1d065634fdf7443b8be2986e3271c6a4992f2e14626c061731edfcc11e09510179ab7820c1a1d86d1e08030d8922cdd7464c32cfa6fb94cc0865db6afc94afa772abe8471dc134b14f04b030d474716f489eef51fe61b1b4a8e49ae7ac71a1c21a97e4c770e4ab85c3ea372b35d4f7eaa875ce95b388021ea2be3a651c3d3cd1be08e496b8ee3ca92c839cf91c44dab8419d29428bd3a0306ef55522de1fea514ecbd0d4487f326b4ef5bd345a51e846fe319f3c2d8884a9a37706536f843e7ff9fdeda724d5bfe1fcfeb5631a61ab685007464061aa8f0072a5592b0c9f36b7cf5fe62cd1071e600834402d7ddafbe0217fed55f2ff9c2874474c94364d39b1ee6a7c8ea68c4548d19babfdb9de42506920f561b0a4e1e583cd617e9426a45b54b232904fa8f124f47147e5a4ff031d1e0afc1f9b9d859293f744fd909afb76928b81a1bb9fe002de3b1e4fa085a20e2783e717cddceca87d523c8d4b232c4fa4830b3ceefb322446ad1641a2c1d73c74ac1984c404d43c844fd22e9fe450b13c1ab3928dd6dc8be6ed68d85b0ecbda7e32b519909a4c2e947fa33741afd6dce070eaf4c828d8c355fefad0a9b1e67f36ea6fec5b3cffaddb53a3b7fb61c16d11b3fbc223dc9b79ed7c62a2d0040099107cdf31042f6fc74c3da94d9c2e6965536530c67f177963ce554b69bb791fb7947077f775c127af0ed1c49019604fbac8bb57c5e702852130fb8c7c37646a92107ce93be2406754ad231a27ead0eaba638549c90904b3d0cbcf8cacdd4e40f3e024483b8e8a503813196747cd8efeb5c56b269d3d663c81ca039794ff55cbe3c4ac5b7af331504a11ebae9eb57fe1bf147eb8e50f1217778a16c16eff12c8c57ed2986da8f5126312436e344bf3c351e8ecccda259d72f245885d5b516cbc96fd6eea5a8d21a2e4f0c257656c0bb53d86667ad3dbc54c9b3244b077acb21f1f7ad0c1e9567add80a7f0e5a6414b7300171bb2e0d006c1c398127ed88bf34c6ae3e048af4b25fa3e3828e17ee00dd5bea2f512971f41d99b4be936c59176e6ab027da8bc991f48e85923782a89a5ca6e826544bf77a82c76a4cb061ee101a64deb68f7844d6cac2898374efb0076e46390fe230d10a12164536286358896393bc2a9c6aa749905257524fb994b13050f53c7511a42adeb596d5346e422c86f1f35b2c0189cda8eb1c91798cee23906b94d403b0107387922e5bde9677cf7d04adf0ae06889f0f89b45eb955595a36d1d78b062e7159a1907d5592813344f11e15be40c6778ab2f05ea8a85eef64ce34e227f0fa5fa6d2480200f11f7ea0f19ddc06d7d48afc76dca", 0x1000}, {&(0x7f0000001840)="fc9ad902c3a2850cb0e4889e232ebe3287671888e7ad319f76e4a44346126a411dbddba488849773d58528b0e12ba1003d8cabe753f1580ea3326c6f6d1bee2078756853c71bec7270e471e29ee653f321db70250159f151a0fb765508c948820180a36fb801e62b1b60e9e59aa5fad91fff000ff4e06f30283d80696ea1fcb02364f2fb8ca0f36f45c1eefdd37bc18eb6126bca9a80cabec7dc6a5df92a31e45f44728237db8c77a81b21fbbfac5593cf334ccc1735367b1d416e8d274500e4d33866b233d029d3e96d3dc0c36bd19772a4", 0xd2}, {&(0x7f0000001940)="42c1ecf17266d22d203da1f5a13205d64c81814aceb42cfa08811f8543c12fa7fb7df903d64ab8366cceadc676ccce2e5b79528d5bc73ff7e0afddd10e639f81963af3b5a5f6ecb0669cf37d7b2a", 0x4e}, {&(0x7f00000019c0)="790bc513569789cf70c5928a7972a2f66ef101f7280ca1a382066d4941e86eba6b2be9687e07a2b1cc65cd2a9588cd97ddd6c8eac2f28a8eccf9346c4f703d1c0bd122a7bc39ed1b47200ef5cd0d52994a9676405b271ec28678b92cd4bfb2eaf207506a161cb457d8c242994a9dfd0a48af09650ad656f6f3ec185cddda4d00c489366f08e101c53150c660ebc06d9fd210c514c84a93f6fa50934617b05c1659448bbf63d2e18acb366c6971a175dd96d34783726236e8666ae285a9e5ea1593db2f9e5dc03f816621c4be10523a890d9a1e24", 0xd4}, {&(0x7f0000001ac0)="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", 0x1000}], 0x9}, 0x58d3493dc1e4c8b6) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x11afea34) socket(0x0, 0x0, 0x0) r7 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0) mkdirat(r7, &(0x7f0000000100)='./control\x00', 0x0) chroot(&(0x7f0000002bc0)='./control\x00') r8 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) splice(r8, &(0x7f0000000340)=0x3, r9, &(0x7f0000002b80), 0x5, 0x2) rmdir(&(0x7f0000000040)='./control\x00') 01:23:17 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b08160df7db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r6, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in6=@mcast2, 0x4e23, 0x9, 0x4e23, 0x4, 0xa, 0x20, 0x20, 0x2f, r4, r6}, {0xffff, 0x7fffffff, 0x81c3, 0x7f, 0x5, 0x4, 0xb879, 0x8001}, {0x3ff, 0x604, 0x7, 0x1}, 0x3, 0x6e6bb1, 0x2, 0x0, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x2b}, 0x9, @in=@broadcast, 0x34ff, 0x0, 0x0, 0xcd, 0x0, 0xa000000, 0x7ff}}, 0xe8) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f00000001c0)='/dev/i\x7fqut/mice\x00', 0x0, 0x101040) syz_open_dev$mice(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r12}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34660f053a6259c05d6b0e7e8bab81b2d8c8c4951f8ca8ffb59a8e3277bcc032758a411a7e84dd22ee05cb2a0a2f41937ce03ee8007252efa81d06f854f3f04d3efb845f30888dfc6679d33090e3c2aa761d1057862ae3a7a7eee7f0adf40100000000000000bf9caf7644d813fac3589915ef5ec99235aaa6f1141fa898a8"], 0x4}}, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x1b) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) 01:23:17 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x16, 0x8, 0x9, 0x3, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x0, 0x4e20}]}, 0x18}}, 0x0) [ 688.037146] audit: type=1400 audit(1575422597.743:816): avc: denied { create } for pid=19182 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:17 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 688.123527] audit: type=1400 audit(1575422597.833:817): avc: denied { set_context_mgr } for pid=19180 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 688.210991] binder: 19180:19184 ioctl 40046207 0 returned -13 01:23:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 688.375796] audit: type=1400 audit(1575422598.083:818): avc: denied { create } for pid=19220 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:18 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@initdev}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) r3 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800003, 0x11, r3, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) mount(&(0x7f0000000280)=@sg0='/dev/sg0\x00', &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='qnx4\x00', 0x22010, &(0x7f0000000340)='selfeth0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) 01:23:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:18 executing program 5: ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{}, "dcc1827521658c88", "992e1492e2d158500e41efd718764173", "f9973fae", "2c123f69b3f44141"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x95) preadv(r2, &(0x7f0000001740)=[{&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/246, 0xf6}], 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 01:23:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x4e9, @ipv4={[], [], @broadcast}, 0x1}, {0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0xfe, [0x1, 0x7ff, 0x8000, 0x0, 0x4, 0x5, 0x7, 0x10000000]}, 0x5c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000200)) [ 688.955860] audit: type=1400 audit(1575422598.663:819): avc: denied { create } for pid=19235 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:18 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 688.989647] audit: type=1400 audit(1575422598.703:820): avc: denied { set_context_mgr } for pid=19180 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 689.054714] binder: 19180:19202 ioctl 40046207 0 returned -13 [ 689.123149] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 689.168431] qtaguid: iface_stat: create6(lo): no inet dev [ 689.206324] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 01:23:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 689.215634] audit: type=1400 audit(1575422598.923:821): avc: denied { create } for pid=19270 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 689.233889] qtaguid: iface_stat: create6(lo): no inet dev 01:23:20 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='V./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0xff, 0x0, 0x1, 0x1000, 0x8}, 0xc) fcntl$dupfd(r2, 0x0, r3) fchdir(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46800) syz_open_dev$mice(0x0, 0x0, 0x101800) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd(0x0) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) readv(0xffffffffffffffff, 0x0, 0x0) 01:23:20 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 690.463776] audit: type=1400 audit(1575422600.173:822): avc: denied { create } for pid=19283 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 690.492288] audit: type=1400 audit(1575422600.203:823): avc: denied { create } for pid=19286 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:20 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x14, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:20 executing program 5: ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x1, 'ip6erspan0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14010108}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc}, 0x4000) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000005200190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000080), 0x3524d8a61b978e8, 0x2, 0x0) 01:23:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = socket(0x10, 0x3, 0x0) poll(&(0x7f0000000000)=[{}, {}, {}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 01:23:20 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='V./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0xff, 0x0, 0x1, 0x1000, 0x8}, 0xc) fcntl$dupfd(r2, 0x0, r3) fchdir(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46800) syz_open_dev$mice(0x0, 0x0, 0x101800) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd(0x0) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) readv(0xffffffffffffffff, 0x0, 0x0) 01:23:20 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:20 executing program 5: r0 = eventfd2(0x87, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(0xffffffffffffffff, &(0x7f0000002340), 0x100000000000003a) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x01\x01\x00\x00\x00\x80\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x400, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x3}, 0x1c, 0x0}}], 0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0xffffffe, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0), 0x0, 0x0) syncfs(0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x2000, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000100)=0x8009, 0xfffffffffffffca1) setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r7 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x5c001) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x8, 0x4, 0x1800000000009) r8 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r8) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r10 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r10, &(0x7f0000000440)=[{&(0x7f00000003c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) write$binfmt_elf32(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x17c) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x411, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000480)='/dev/keychord\x00', 0x385, 0x0) eventfd(0x8) fstat(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000980)={0xa0, 0x19, 0x0, {0x2002, {0x0, 0x1}, 0x0, 0x0, r13, 0x2000000000442, 0xfffd, 0x100000000, 0x9, 0x0, 0x6, 0x7fff, 0x3, 0x0, 0x915, 0xac46, 0x0, 0x20000000000003}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@loopback, @multicast2}, 0x0) readv(r3, &(0x7f0000000400), 0x3) read(r11, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r9, r10, 0x0, 0x180003) 01:23:21 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) open(0x0, 0x475100, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000740)="072c1fb5ee415fd908429e9757bd25e49444e22afe2cc6d10dbb75b00146d915d5eeec29af419f866c789a1dd1107840f5226011a4c236d1a0f3d4411208e97891e83f460c33ce14d985b9fd5a6e5986e9faee22e96df6e90d055124695366ac1786e9b824610efad69a618b9bf2e236a81356b7d379d8f3ff0aafa43cdf5cab97226891d154a3b68dc7dd", 0x8b}], 0x1) r6 = memfd_create(&(0x7f0000000140)='selinux:eth0\x82\x00', 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000001fde), 0x4) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/641]) memfd_create(&(0x7f0000000040)='u', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 01:23:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f00000005c0)={0xa, 0x4e21, 0x0, @rand_addr="05264495f879a72c8be56ee5f546fa5a", 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="17", 0x1, 0x8081, 0x0, 0xffffffffffffffd3) r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000080)) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1'}, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="10", 0x1, 0x8081, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xac, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840020000000000000000000000000000000000000010000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000f0ffffff00000000008561646600000000040000000000000000008000"/44], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="0004000000000000086310400300000000000000000000000000000011634840000000000000000000000000000000000000000010000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/181], @ANYBLOB="b50000000000000001000000000000001f00000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a68730a00"/36], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0004000000000000"], 0xd0, 0x0, &(0x7f00000004c0)="95a04410d119c2887afa61ca3eb7e29dd3f94c0569281c727094952c62c70b93e28d9fe1adcc3dc24e7164038c2ad27c82c4b4469c56a32fbea30697477ed8de0a8c9d76fd18e79f24ee14383db1f3d3d3dbdfa4e67a87873b04954b36482c323983bb503ca80825c61e95445e57488e3257a8c7c6894766924445b054895c788aeac09778da76eda0fc940cf47c86711a70b036b5b9e9440499ab30ebc0590813e98affb3c84c3d7253905acc34d09d21373d16ec870a22419b1ed371f3e59cb76c6873de6c4478afa5c0cff63307fd"}) [ 691.429167] Dead loop on virtual device ip6_vti0, fix it urgently! 01:23:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x20000100000000a, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r4, 0x0, 0xffffffffffffff51, 0x8000008880, &(0x7f0000000240)={0xa, 0x4e23, 0x401, @remote, 0x4}, 0x1c) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x60e443, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x11, 0x0, "64de77b6acba2628f679d8f90f52ff96999298f7733dcf0d9520cb417df540470c57fea2826bba946fa8d173172e43a449aa5606b20ad0c0c09e3ebd66b1158d", "e1b65729350596ee17a13486dd2c7ff1b71726b82c4dff9cd7fc9da12d6da234", [0x40, 0xcfc]}) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000100)={@loopback, 0x63, r7}) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 01:23:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00\x00\xbb\x9c&\xd4)z\xe0/\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x1512c2, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x3) ftruncate(r2, 0x2007fff) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x1892277a) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r2, 0x0, 0x8000fffffffe) r5 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500000200000000000000000000006622e85f3d08e1fb8abc9e557817db65bc28dce194bb4c9dd6f87a264c66c0c37e2b34fbb2401107900b4e1e0e2d275caa821047c7dd3da4cee9ca5560e245db02becafa39679f8f4a81d48e234c7bde2f29bf00"/110], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r9, 0x40045566, 0xc) tkill(0x0, 0x15) 01:23:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 692.057176] Dead loop on virtual device ip6_vti0, fix it urgently! [ 692.299293] audit_printk_skb: 15 callbacks suppressed [ 692.322863] audit: type=1400 audit(1575422602.013:829): avc: denied { create } for pid=19333 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:23 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x10100, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000240)={'nat\x00', 0x1000030e}, 0x44f) r2 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x14}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x121000, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) 01:23:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:23 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:23 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) open(0x0, 0x475100, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000740)="072c1fb5ee415fd908429e9757bd25e49444e22afe2cc6d10dbb75b00146d915d5eeec29af419f866c789a1dd1107840f5226011a4c236d1a0f3d4411208e97891e83f460c33ce14d985b9fd5a6e5986e9faee22e96df6e90d055124695366ac1786e9b824610efad69a618b9bf2e236a81356b7d379d8f3ff0aafa43cdf5cab97226891d154a3b68dc7dd", 0x8b}], 0x1) r6 = memfd_create(&(0x7f0000000140)='selinux:eth0\x82\x00', 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000001fde), 0x4) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYBLOB="0000000000e0bdb6030000000000000002000000b9000000070000000000000000000000072300000000000000120000e6ff0000020000000000000000002b791e29000000000000fdfffffbffffffff82cc498500000000000000000000400000f7180100000000000000000000000000000000000000000000000000000000000000ffff770000000000010001000000400000060000000000000000000000000000000000000000000000000008000000000000000c00000000000000560c00000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000020000000000000000000045000000000000000000003cdb800000000000000700000000000089001100000000007f000000000000000500000000000000000000000000000000000000000000000001010000000400000200000000000000d7000020000000004597056ad4eb07e7c2c5bcf1caf8258bca028bb509953f5799cbfdda9745af613f96baa2eb0291d05eb291a998084f6315412eeede054f606c4eec83843993b880409b572c32cf483d45165c87312c844eba724c90c8b2b896ccdefcac5b8d52fead585a000000006fadcf7420a284e11c58417b4095ae7c73cdccba0468c926622f706b1a10a50d158b8b2a83724db0c7e927c0bf4d4801b1d686fc469a313046c87415ed7e27687f8425f9135bd7d07cf192a15f9ba839fd8d5dc51b0a40cbc46d899147b04db95ac845736c21298cd5544461ca766d96b883d61043d4b6a1881e7fa8c0aa2bd337a86ff7c08139314bfab8dd473586d85526025ea59f1bbd49ff502e501f051285d8ce3e29930f07d34f16d95893f73c51111265bc411e00"/641]) memfd_create(&(0x7f0000000040)='u', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 01:23:23 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00\x00\xbb\x9c&\xd4)z\xe0/\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x1512c2, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x3) ftruncate(r2, 0x2007fff) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x1892277a) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r2, 0x0, 0x8000fffffffe) r5 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500000200000000000000000000006622e85f3d08e1fb8abc9e557817db65bc28dce194bb4c9dd6f87a264c66c0c37e2b34fbb2401107900b4e1e0e2d275caa821047c7dd3da4cee9ca5560e245db02becafa39679f8f4a81d48e234c7bde2f29bf00"/110], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r9, 0x40045566, 0xc) tkill(0x0, 0x15) [ 694.297407] audit: type=1400 audit(1575422604.003:830): avc: denied { create } for pid=19381 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:24 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 694.369345] audit: type=1400 audit(1575422604.083:831): avc: denied { create } for pid=19382 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:24 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0xa080) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000980)=0x5, 0x4) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="00cbac00"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 694.616240] audit: type=1400 audit(1575422604.323:832): avc: denied { create } for pid=19409 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:24 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) getpgid(r2) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000580), 0x25b) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r9 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r10 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r12 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r12, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) write$binfmt_elf32(r3, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) fcntl$setstatus(r10, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r15) pipe2$9p(&(0x7f0000000480), 0x4000) r16 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16}) fstat(r16, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r21, 0x200004) sendfile(r18, r21, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r21, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r20, r17, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r9, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r13, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r11, r12, 0x0, 0x180003) 01:23:24 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) open(0x0, 0x475100, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000740)="072c1fb5ee415fd908429e9757bd25e49444e22afe2cc6d10dbb75b00146d915d5eeec29af419f866c789a1dd1107840f5226011a4c236d1a0f3d4411208e97891e83f460c33ce14d985b9fd5a6e5986e9faee22e96df6e90d055124695366ac1786e9b824610efad69a618b9bf2e236a81356b7d379d8f3ff0aafa43cdf5cab97226891d154a3b68dc7dd", 0x8b}], 0x1) r6 = memfd_create(&(0x7f0000000140)='selinux:eth0\x82\x00', 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000001fde), 0x4) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYBLOB="0000000000e0bdb6030000000000000002000000b9000000070000000000000000000000072300000000000000120000e6ff0000020000000000000000002b791e29000000000000fdfffffbffffffff82cc498500000000000000000000400000f7180100000000000000000000000000000000000000000000000000000000000000ffff770000000000010001000000400000060000000000000000000000000000000000000000000000000008000000000000000c00000000000000560c00000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000020000000000000000000045000000000000000000003cdb800000000000000700000000000089001100000000007f000000000000000500000000000000000000000000000000000000000000000001010000000400000200000000000000d7000020000000004597056ad4eb07e7c2c5bcf1caf8258bca028bb509953f5799cbfdda9745af613f96baa2eb0291d05eb291a998084f6315412eeede054f606c4eec83843993b880409b572c32cf483d45165c87312c844eba724c90c8b2b896ccdefcac5b8d52fead585a000000006fadcf7420a284e11c58417b4095ae7c73cdccba0468c926622f706b1a10a50d158b8b2a83724db0c7e927c0bf4d4801b1d686fc469a313046c87415ed7e27687f8425f9135bd7d07cf192a15f9ba839fd8d5dc51b0a40cbc46d899147b04db95ac845736c21298cd5544461ca766d96b883d61043d4b6a1881e7fa8c0aa2bd337a86ff7c08139314bfab8dd473586d85526025ea59f1bbd49ff502e501f051285d8ce3e29930f07d34f16d95893f73c51111265bc411e00"/641]) memfd_create(&(0x7f0000000040)='u', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 01:23:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x15f) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r8, 0x200004) sendfile(r5, r8, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf25ff020000000000000000000000000001ac1414bb0000000000000000000000004e2100004e200007", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000300010000000000"], 0x8}, 0x1, 0x0, 0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'g\x01etap#\x00', 0x0}) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r12 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r12, r15, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r15, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf25ff020000000000000000000000000001ac1414bb0000000000000000000000004e2100004e20000700008000a20000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e0003000100000000"], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet6(r4, &(0x7f0000002340)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @local, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000a00)="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", 0xffc}, {&(0x7f0000000180)="4cffc6beb7b8904d495a9c67ae1e5159d3468ee1ebd029e34440564f1fa0d18f12d782f87bc06fb5d125cf6b31a770ac9fa7cd33bfe9f2cad1dc57294e39fe65ba10bb7459e1ab58738acc7707c1c91c7b5ef9008833878be13c8a8789211d66277feebe2678c0fe14d4a1c7b58516854011a6efb396028d0319fd78b409cd98b462703f2d", 0x85}, {&(0x7f0000000380)="e7db6463eb6cbd521e2943fd891a5b07a5833674e04c6c6136f95f944f35539b24edd9730086c2f75f1d5b6dafe5a4c127e905a07545d346635d3d88bf9a87d6fc12a559554e34cf63e3bc07cbcf6327a641cfb5fcb436da608046b2afd202fb914250f82a124b1ae6769dead5819edea545a30568ad5fcf2056cd4b2ac4774994d6c3d75593e0362f477b6f4493f9a6eeda635d7968d5bf19c9e76d257f7ca77ff79f8c30b818fc58df96309d0a80eabc0b132135476556", 0xb8}, {&(0x7f0000000240)="3d64aec6c8b3a2eb3ade542315", 0xd}, {0x0}, {&(0x7f0000000280)="99f60404ddb3c55b57abea66d97014", 0xf}], 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="280000000000000029000000390000000202010f00000000ff02000000000000000000000000000124000000000000002900000032000000fe880000000000000000000000000001", @ANYRES32=r6, @ANYBLOB="000000001400000000000000290000000800000003000000000000001400000000000000290000000b000000ffffffff0000000024000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r10, @ANYBLOB="000000001400000000000000290000000b000000000000800000000024000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r11, @ANYBLOB="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"], 0x1e8}}, {{0x0, 0x0, &(0x7f0000001e80), 0x0, &(0x7f0000001f00)=[@hoplimit={{0x14, 0x29, 0x34, 0xcede}}, @tclass={{0x14, 0x29, 0x43, 0x6c39c297}}], 0x30}}, {{&(0x7f0000001f40)={0xa, 0x4e20, 0x3ff, @loopback, 0x3ff}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000002040)="bfeb55f736cc17ad637bf98b677d889602f84b2d1bf2684e7d9fe355783741657e53ecae96d7df659f9b67fdef19a76232c4665d3db8d17076f30eb7db392d95e4d116f39b416ebd1235e64f6880d17c297c4b7a96a428eff793e1a10d81864dcfde6dabac9333bd71e3ec8bd2e10ee35c6d51f17ca7dba5b25a37500443f57c880500a0d4502438fa1434ee1ca09889a3a8d97c9cbe22e9f8e73b5029e23b625f0e9fd3c2c9f2caa810ae2fb32a9fca58fe9c9368001ce8c0c61b941ea2223103c5", 0xc2}, {&(0x7f00000002c0)="247ee82cd54d7201cfe934ae18b30e003857f4fe9a0112caab496b3aae", 0x1d}, {&(0x7f0000002140)="13da8a5b24bd0a54b7f514ec772f3bceb5fdd98dc7dac7c4c8c155da9d84e1c3d74bdf3fe31caacb09d942f095447f8fdbec0f819cd2a1e54bfaa78a6957f96f57cc5e83987cb1a633d4f94c7a8cff119713e568d791410b3d15e8abc01959f6fcc6d5eb31bcee3132394d12e15fa5dc6487e7c920173f20caf5625a815631ddb6a1687559c751c2268bb4824be1084fd465ccce406b562c3cb8cc225acc56c989250ed67bae938777d462a05b42cdd05e", 0xb1}, {&(0x7f0000001fc0)="256a82bba06219942dd3d230fb83e03b06b57524d4cb624919cd5ae523716249ce61cd98c214a47978c1d0b7fc53c69afb7dba0ece366b42", 0x38}, {&(0x7f0000002200)="4f7b3e6ac13359e4356d6dd5ed3f9be7147e08e73f0fb3b77ca005240c2bda827d99380b9954ea0b54bfe423bfeef15cdc0a057c09da8ca8bbc154d66cce3f9052062ad41915f2948b32ff92da0bbffa09040d7305fb8f64c7f02af14ea64612538a4eb82dfb1ea94b6b5cc7cdc4d2a21d6643a4a1e6628fd5265261b0628097997f56deffa77df5f83967d89572f411ea63", 0x92}], 0x5}}], 0x3, 0x400c100) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) open(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x4a) pipe(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16}) setns(r16, 0x4000000) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup(0xffffffffffffffff) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r17 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) ftruncate(r17, 0x2007fff) 01:23:24 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x200001420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000704ab092506090007000aeb08de05000000020012ad210001", 0x5d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) syncfs(r4) open(&(0x7f0000000040)='./file0\x00', 0x40500, 0x3bf) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 695.262841] audit: type=1400 audit(1575422604.973:833): avc: denied { create } for pid=19431 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 695.274830] audit: type=1400 audit(1575422604.973:834): avc: denied { create } for pid=19442 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 695.278177] audit: type=1400 audit(1575422604.973:835): avc: denied { create } for pid=19442 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 695.330355] audit: type=1400 audit(1575422605.033:836): avc: denied { create } for pid=19435 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 695.434988] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.5'. [ 695.451167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 01:23:25 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) getpgid(r2) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000580), 0x25b) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r9 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r10 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r12 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r12, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) write$binfmt_elf32(r3, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) fcntl$setstatus(r10, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r15) pipe2$9p(&(0x7f0000000480), 0x4000) r16 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16}) fstat(r16, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r21, 0x200004) sendfile(r18, r21, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r21, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r20, r17, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r9, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r13, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r11, r12, 0x0, 0x180003) 01:23:25 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) open(0x0, 0x475100, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000740)="072c1fb5ee415fd908429e9757bd25e49444e22afe2cc6d10dbb75b00146d915d5eeec29af419f866c789a1dd1107840f5226011a4c236d1a0f3d4411208e97891e83f460c33ce14d985b9fd5a6e5986e9faee22e96df6e90d055124695366ac1786e9b824610efad69a618b9bf2e236a81356b7d379d8f3ff0aafa43cdf5cab97226891d154a3b68dc7dd", 0x8b}], 0x1) r6 = memfd_create(&(0x7f0000000140)='selinux:eth0\x82\x00', 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000001fde), 0x4) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/641]) memfd_create(&(0x7f0000000040)='u', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) [ 696.070961] audit: type=1400 audit(1575422605.783:837): avc: denied { create } for pid=19442 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 696.073586] audit: type=1400 audit(1575422605.783:838): avc: denied { create } for pid=19454 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:25 executing program 5: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) fchdir(r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000540)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) 01:23:26 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x22) tkill(r0, 0x36) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) ftruncate(r2, 0x5ee5) r5 = socket$netlink(0x10, 0x3, 0x8000000004) fsetxattr$security_evm(r5, &(0x7f0000000100)='se\'\x00rity>evm\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd160373f2abf296fc06065478d7a084c6ff8dabad01b9c565379a379e34d76ece3726dcd996ca1b89371e98a780c9eaba8c848184000d49d7f3d3066e90c4c70418f5f31ba6da32b6f4154b69ddf1193e9648275fd9d6ca2a4b28efcf7ff619e3d291a8abf707e197b2b"], 0x1, 0x1) prctl$PR_SET_TSC(0x1a, 0x1) read(r3, &(0x7f0000000200)=""/250, 0xfffffe8a) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x100000001, 0x10001, 0x8, 0x2, 0x3, 0x4, 0x1f4, 0x40, 0x14c, 0xa7, 0x5, 0x38, 0xffff, 0x80, 0x2, 0x7}, [{0x2, 0xfff, 0x7ff, 0x3, 0x2, 0x7, 0x911}], "be5d0b7aafba3908eabaa1818d8d6a", [[], []]}, 0x287) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd2(0x4000002, 0x80000) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r6, 0x541c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000580)=0x6) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) r10 = getpid() rt_tgsigqueueinfo(r10, r10, 0x16, &(0x7f00000001c0)) ptrace(0x10, r10) ptrace$getregset(0x4205, r10, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r10, 0x0, &(0x7f0000000000)=""/3) r11 = getpid() rt_tgsigqueueinfo(r11, r11, 0x16, &(0x7f00000001c0)) ptrace(0x10, r11) ptrace$getregset(0x4205, r11, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r11, 0x0, &(0x7f0000000000)=""/3) r12 = getpid() rt_tgsigqueueinfo(r12, r12, 0x16, &(0x7f00000001c0)) ptrace(0x10, r12) ptrace$getregset(0x4205, r12, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r12, 0x0, &(0x7f0000000000)=""/3) r13 = getpid() rt_tgsigqueueinfo(r13, r13, 0x16, &(0x7f00000001c0)) ptrace(0x10, r13) ptrace$getregset(0x4205, r13, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r13, 0x0, &(0x7f0000000000)=""/3) r14 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r15 = getpid() rt_tgsigqueueinfo(r15, r15, 0x16, &(0x7f00000001c0)) ptrace(0x10, r15) ptrace$getregset(0x4205, r15, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r15, 0x0, &(0x7f0000000000)=""/3) r16 = getpid() rt_tgsigqueueinfo(r16, r16, 0x16, &(0x7f00000001c0)) ptrace(0x10, r16) ptrace$getregset(0x4205, r16, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r16, 0x0, &(0x7f0000000000)=""/3) r17 = socket$inet_udplite(0x2, 0x2, 0x88) r18 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r18, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r19 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r19, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r20 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x101000, 0x0) r21 = inotify_init() r22 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) r24 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r25, 0x0) r26 = getegid() getresuid(&(0x7f0000000540), &(0x7f0000000740), &(0x7f0000004500)=0x0) lstat(&(0x7f0000004540)='./file0\x00', &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = dup(r29) ioctl$PERF_EVENT_IOC_ENABLE(r30, 0x8912, 0x400200) ioctl$TIOCGPGRP(r30, 0x540f, &(0x7f0000004600)=0x0) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r33}}}], 0x20}], 0x1, 0x0) sendmsg$netlink(r9, &(0x7f0000004700)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x80401000}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000a40)={0x11fc, 0x3f, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x198, 0x61, [@generic="3ac22335b2b2f79bbcf9402eb85f9c86c1f7df64dc6bde920929ff66781030501e594fa507453fa7a2a46f27ffca9161497400b262674a72e98842c7762b202667c08e6fc0bbcedda07706a38ef085d0d1ad36f2860ddfcb67e9eb4ab74a65c2242dcf014959da", @generic="9bc7fcc9a2b0a45989300b3b42963de14639b62b760d432050cec0f76f1014c375ed8620441012663be0f9103012f41c4343ff052d2e6899d2d91c0cf7", @typed={0xf0, 0x22, @binary="26cee2c1187e4898855b6c11bab24c3838a7857f4c4b04a4b651d072b5a96ecce5e287fa2c77e26d3257092afc189052ae775bd2dee4f890a57b4c5784a1e60ed8d9b004191ba2814293094652d6f5e026f93e6e021a58e04aa411990eb3dad37917d674ca4e6c192b8bb26b73829c1c5b2dbb370051c56d5e95b236543407299dbbf2142dfaad4d09057debd0e1efd9e8ab8f9d27cd1e2de999e588feb301229b9a112f8edb718ac8d522473ecbd5606f3a96d89ba47575ea1c7ea50fc238798c53525381ea3654078a5ba70c1df2d7ff7683c87cce5d94bc027b1610d1d5fed7606cdcee1ae45a5ded"}]}, @typed={0x8, 0x67, @u32=0x2}, @generic="ed2f3d3bbaac345a3e3e110ceb0354ec5be2b7dc11653abbbd5c0f8869f0ccfdd6048671242de44a64c7", @typed={0x14, 0x73, @ipv6=@remote}, @nested={0xc, 0x6e, [@generic="accfc403fbdd586d"]}, @generic="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"]}, 0x11fc}, {&(0x7f00000005c0)={0x174, 0x42, 0x100, 0x70bd29, 0x25dfdbff, "", [@generic="486ee929c940b2b60a4a7aa16242b177c67b1d", @generic="a6f04c8f8b6313c18e98ea3d60cabf6176431921e681630cdf87044393667731dd92555a5a4f2cbd3fc265cb4cdf48aa53b14eb5dcadecb4dd2890dafdf12c8178f880a34f8f88779dbeb0dd3007a82ae348d93b1c0837dd9859256b40374a9a52f89b68aaa4677ee24f8aa1c92c3c07bb00df8c7d37338d1c17b54b5d6992e979d5b149ce0d62f2", @nested={0xc8, 0x65, [@typed={0x8, 0x1b, @u32=0x1}, @typed={0x8, 0x3c, @pid=r10}, @generic="2646513aa6039cd26c3463e6b1029006e8a55789feef72b92b12f8dd78a88b90992961adaa23e5fd371cc66db62ed681bb98c5a31e093cb9a3fd249937ae27481511e210432a9b7b9b17cfb41b5962a782940ed55660bce74dca9edb6f28a85f792e25a08064cba7bdcdefe96f9c894a22b420a754288d1bfaf28fff42e8e088f4ad73463a4c05fad421d60b5973942dd6b9e41ad95bb1259605d421dd8f0ad08c253d8407c4cc5110960d3c7648276eb9de72"]}]}, 0x174}, {&(0x7f0000001c40)={0x428, 0x2c, 0x400, 0x70bd28, 0x25dfdbfb, "", [@typed={0x58, 0x69, @binary="2074374f1f19c501bab72d70e176eae04c92436c4072d77c543f33c1c9090472836fab174f68d4bad12af5a47426542f83f73cca610ca4ea56fed7b4f347a2214a9077baac4fc962a13994acd70503af86621a"}, @nested={0x3c, 0x13, [@generic="0a980af6f72f3abb7bde64f2cfc189e92077491a32042623887785cbd8133160f58228314878600220aefe37b6851625e9510c56eed95681"]}, @typed={0x8, 0x61, @pid=r11}, @typed={0x8, 0x8b, @pid=r12}, @typed={0x8, 0x10, @pid=r0}, @nested={0x36c, 0x29, [@generic="88af6103e72507ca5bf8329240742d95936702b0253a7c6b7a50366683e870be22503b43380298d92e5cbb10741d8e3c80e43a161b20ea3bd23f9e0c1cd04b2843cdd951becce0b2f9bb0ed37b84e2a84c424e0a63270a2e145782acad68519f5cb30f147cec2ff34764fc8920e581a0de6718bc73", @typed={0x8, 0xb, @u32}, @typed={0x8, 0x91, @pid=r0}, @generic="b7504ba3b98f50e9612d923c8ea9c6370b543ef0bc9972533de3daba14ec6881535ad0b0e13df03c614dd9a565ab3816dd7bf8eb8076d9f5c0da98bbcabb719e883c9539a786b4fd2235057238f7a5460dccb2a09ced05d1892551ebb6c9d6ceb192861dfca45c638f524e88662006cad9c7110a597b7db624ad432d5a2bead2b2220c8ac6ad3682af243863363266345241be582756ddc301daad8677aaef443aedc56881d6ac9e66cb54baa613e2cddb87701a4557123274e04cdf27fc1f3a510e6b034fcb7120cd4c91ad95d7d35669542bfab910866f22ec5c7439dbf51bc84e06def5d78103ad9dddaec5d32a62db", @generic="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", @generic="abc1ef6af5103f2e8217c5e1f4149dad862707b7b437fdd9254f004cd2ed2e0c461776a2b4a42e1545ac6737baada31321b454f1a4c0dd27fc561ad7da3d0e18761304770b596ef52bc644726c352ca8d7cc1b2fb9220a94a8dcd60353023f5505e0a9631d70202d3d1880afda43aecf8129fdd36e49ef064c6ee426ebbcc77194b5189326e7b44d05f6b555735636ea7ad4aa2f819a79ac912fefa9b33df1f6b74fad07ce60617ff90e142446c4ff777f7e84ff709d956790f16c08f87f526a0db18e370998779186dcad3ab7b984f16d063121863cd31a05a2255d11ce24a9797e0406e6f810eb2aead9cde2d4491138cd4bcc13f0c2"]}]}, 0x428}, {&(0x7f0000002080)={0x13c, 0x32, 0x300, 0x70bd26, 0x25dfdbfb, "", [@generic="e8292aa7afd09c0dc8cc7e1aea291749b84d4b208624fb9a0f96e3e7c381f1c0c2da843b8d2401cf0ddbc5db60c7ad399c353110f2a38b15f66ceb867ab9f64ba3f1996ed5477cb5a472b107054f7a804336e2e380658d48f72c106be9e6737e8a10ab2324d80de077c4656c113992350ca75cf241bccfdeebebdcef613dab62d50513eb225f971f27c866672dbb5204bf346551", @generic="01109b3f21ee55c8bceb4ff8a182c9a16ee502036bc1e4ad75a2efa61e7b2b234ce82e8538087ce3595a73cdb017d083775dad4c6a4d58289d5f773f86d40f9af3e1a657a48dcd375444dd91158fc419200f8340c62d740d7a64279d374aa8d1a7216f04c7904095f7bf2f9e4a9921698546244f441dd5d9189940", @typed={0x8, 0x6c, @pid=r13}, @typed={0x14, 0x1f, @ipv6=@ipv4={[], [], @remote}}]}, 0x13c}, {&(0x7f00000021c0)={0x2308, 0x23, 0x8, 0x70bd27, 0x25dfdbfd, "", [@generic="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", @typed={0x4, 0x71}, @generic="2f1cf7474d0babd705c1a7fc5cfa56004fe325f7ebcf95964744eab2b3599530ac36c79323588239426dacf938c8619cec17e31ed657bed29028da93f1884d928c972b4bc0cb61d2d366258fb60e68a6dd456a437bf81aed46fe00c79f19e6887209c4e719d5e824bf40402fb7875156346b34dc8f00af02aeb8b98ac1fb1563a20b4a016a65b55e10bc49cf9a814a86aa94713a05", @nested={0x11a0, 0x64, [@typed={0x14, 0x59, @str='/selinux/policy\x00'}, @generic="6bbc03727bf009492d84e6e8d5c392f2d97cf78eb06805f09ef191b0c8d940903126a11c3bac8348f14eac11f5b5ff301ff75060ae4135cc6bf8105a39f0eba478806c3c6fa69cb9759eaf0506a866817a9ea274b6b8c9b011425d82c0f3a74358641b44644a8a38d30a2d23b85e588b66a622ec9dd3864bcf9f06afef097658696e28c3cdf23e4a5b1c08e3ecb30d419674ab7e51ccfbe6", @generic="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", @generic="4686227681ce3555ce3ab5234699f1818d", @typed={0x8, 0x82, @ipv4=@rand_addr=0x7fff}, @typed={0x8, 0xb, @fd=r14}, @typed={0x8, 0x5c, @str='\x00'}, @generic="a7109d51ddbac122179ba89225576c9070bad48d0ec5819d3a9618062afd9a", @typed={0x14, 0x25, @str='/selinux/policy\x00'}, @generic="508d32cd1c32cf28de00e5e73d0c71b34e00da0b808311e05adadc8cc0654b253b4e827de493282ac304bf5a91f4c3450192dc4a11589cf2c615e8fbc97220e0034791b0a9661cb13d4c279d4ad95ff49082b70d9cc75eb782ebb8fae67ce6765a79b20a03944719e369dbb39458372729cc3a7e4d65863266025f05e421de575443f433fdd0e0c89c1bf984f62eb260a2"]}, @typed={0x8, 0x75, @pid=r15}, @nested={0xac, 0x2b, [@generic="9248aefb933c6681eb36c5aa1b9223849b6e8eb260a3e0cd28478de5ab87c44be7eacacf1f968fd908c446ce144b70ca2cf7d9a37a80bb07b8cd13261e524098554323c66672c9cdcd0d22c0fdcf390718716bc2d35f11df82134501981942b5cbc20b1f94058dc651f52c3b11fccac9e8c9d8d63830a8d560917df53eaa8c2cc35ce9194e23367b0ac87957c3ad382071d0d5075bd6a51c8919dc5d17", @typed={0x8, 0x34, @pid=r16}]}, @typed={0x8, 0x6d, @ipv4=@multicast2}]}, 0x2308}], 0x5, &(0x7f0000004640)=[@rights={{0x30, 0x1, 0x1, [r17, r1, r18, r19, r20, r21, 0xffffffffffffffff, r22]}}, @cred={{0x1c, 0x1, 0x2, {r23, r25, r26}}}, @cred={{0x1c, 0x1, 0x2, {r0, r27, r28}}}, @cred={{0x1c, 0x1, 0x2, {r31, 0xffffffffffffffff, r33}}}], 0x90, 0x44}, 0x20000000) setsockopt$inet6_tcp_int(r6, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:23:26 executing program 5: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) fchdir(r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000540)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) 01:23:26 executing program 5: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) fchdir(r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000540)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) 01:23:27 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) getpgid(r2) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000580), 0x25b) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r9 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r10 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r12 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r12, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) write$binfmt_elf32(r3, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) fcntl$setstatus(r10, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r15) pipe2$9p(&(0x7f0000000480), 0x4000) r16 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16}) fstat(r16, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r21, 0x200004) sendfile(r18, r21, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r21, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r20, r17, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r9, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r13, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r11, r12, 0x0, 0x180003) 01:23:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:27 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc00c28af09239543, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x300600}, 0xfffffce5, &(0x7f0000000600)={&(0x7f0000001e80)=ANY=[], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r1, &(0x7f00000001c0), 0xfffffef3) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83) r4 = epoll_create(0x5) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x200f}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x28) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}], 0x20}], 0x1, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r13}}}], 0x20}], 0x1, 0x0) getgroups(0x7, &(0x7f0000000480)=[r11, 0xee00, r3, r3, r3, r13, 0xee01]) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x3}, [{0x2, 0x1, r2}, {0x2, 0x0, r9}, {0x2, 0x9fe0fb5d3f35e038, r2}], {0x4, 0x1}, [{0x8, 0x3, r14}, {0x8, 0x7, r15}], {0x10, 0x3}}, 0x4c, 0x2) sendto$inet6(r7, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) socketpair(0x0, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180)) faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600) 01:23:27 executing program 1: open(&(0x7f0000000280)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)={@local, @remote, @loopback}, 0xc) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x44040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x70, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5854aa9f}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x45880}, 0x1000c049) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f00000005c0)) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) 01:23:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/uinput\x00', 0x0, 0x0) dup(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/uinput\x00', 0x0, 0x0) dup(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/mls\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/uinput\x00', 0x0, 0x0) dup(r3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/uinput\x00', 0x0, 0x0) dup(r4) memfd_create(&(0x7f0000000880)='net/icmp\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) eventfd(0x0) pipe(&(0x7f0000000140)) dup(r0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="34bd0f056f"], 0x5}}, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1b) ptrace$setregs(0xf, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="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") ptrace$cont(0x7, r5, 0x0, 0x0) 01:23:27 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRESOCT=r4, @ANYRESOCT=r0, @ANYRESDEC=r5], @ANYRES32=r7, @ANYPTR64, @ANYRESHEX, @ANYRES16, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000740)=ANY=[@ANYBLOB="fa333fbcbc02bc491d894082b88ee6971a69be111dfff68adc56d73603ad7a5bfa3bc6bd151ee56a95e9fb56418018d6e25eac154d3b544b2cc4936359b23770974b8828", @ANYBLOB="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", @ANYRESHEX=r6, @ANYRESOCT, @ANYRES32, @ANYPTR64], @ANYRES64, @ANYBLOB="b6ae6c1096903d09abdba026a780d32841f2d07d4ac14c8950df59042e992ec3753727761bfec6acf3f6a7e12535d349591719494535d0d2321c7603ac19010954bd5417a85aa5215a0d3e60a5689b59bb9b8a77297c718d15912573adbc6d9c4258fae8980b002a82e8fbe3ed19759a73cf1c0f69e10b14ff9f8dfa2a16feec6a0bcb415b8067c31212534b6c26e7b235ace91e1f5b84c01c0a438144206a3a330fe29786811c26c4cc883ba7"]], 0x30}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 697.891416] binder: BINDER_SET_CONTEXT_MGR already set 01:23:27 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000340)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0x10, 0x3, 0x2) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x323) r10 = dup3(r9, r8, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) dup3(r12, r11, 0x0) r13 = dup3(r12, 0xffffffffffffffff, 0x1c0000) preadv(r13, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r14 = socket$inet(0x2, 0x0, 0x0) syncfs(r14) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r15, 0x8953, 0x0) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, &(0x7f0000000500)={{0x2, 0x4e22, @multicast1}, {0x1, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r16, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, 0x0, 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x0) r17 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r17) r18 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r19 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r10, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r18, 0x4c00, r19) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r17, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r17, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r21, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r24, r22, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r17, &(0x7f0000001b80), 0x0) read(r20, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r18, r19, 0x0, 0x180003) [ 697.912210] binder: 19524:19524 ioctl 40046207 0 returned -16 [ 697.959977] binder: BINDER_SET_CONTEXT_MGR already set [ 698.018256] binder: 19515:19533 ioctl 40046207 0 returned -16 [ 698.026655] binder: BINDER_SET_CONTEXT_MGR already set [ 698.032542] binder: 19524:19524 ioctl 40046207 0 returned -16 01:23:27 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:28 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r2, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f0000000580), 0x25b) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r9 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r10 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r12 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r12, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) write$binfmt_elf32(r3, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) fcntl$setstatus(r10, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r15) pipe2$9p(&(0x7f0000000480), 0x4000) r16 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16}) fstat(r16, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r21, 0x200004) sendfile(r18, r21, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r21, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r20, r17, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r9, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r13, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r11, r12, 0x0, 0x180003) 01:23:28 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fstatfs(r2, &(0x7f0000000140)=""/31) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x27) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000001c0)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r2, 0x0, &(0x7f0000000000)=""/3) ioprio_get$pid(0x1, r2) ioctl$LOOP_CLR_FD(r0, 0x4c01) 01:23:28 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0563044000000000116348400000000000000006000000000000000000000000000000000000002c00000000e700001800000000000000ebea519192296ee9e100000000000000059ba420a0ce6f9957d38d10aac1bc8db749de0601e22370a2e270db8c179cd7f6fd8b6337b78dc30f1a86a162c5f1418373d8b22e430b361fc5332f7d6842e74953174c4820a02121a72573041ce5e1e45469b32b49f42286baab59833510b4039ca15ff54f157aeaf65304f44d7b31c6bee3ce0ac0c0ed5e0d101fa63798cdc524953089c2d39a4654dbb517801150a564b3195f24f40b5975b3b163e96afaad568abd214876d4df62e107da92b949b4fa6abc98a1a4f140b6a40c084edc7dbe39a5f9d031adab122b192bf6bbc454a29e70af173ec9f265c2eaa0fe61e88711a42ecf5fdddac8f4e3a8a5e3a9e62513c37b7331e1893f43a2dba059dec3d2959a45d23affa585b96e5b7fa7c48d7ab74831f33f924b65cb685c9d6670acf6277507019df5854fba69839c476a775ef6e8d1b17d197f9116d52d72e81d82f419dd40ca60b21d4c6b8b16a3d4e8d00576a2e36c35d488151ba22d7e6b089885bf17a1df20b96f500e77677e3406a6af76531b903b2805f9edd08a7c2fea04b6e14df46aea4921067087baa64d99635fcd1808a9b0f43885f8166022893be95a2e890cb341643840603104942fb1ef060335cced270061858e47c137d4021c9007d2b1a89c1bd4a9160194f58d61dfeeda42a4d4d4b0c80ce1a3223f02d967677629d52f83d8494e305e69144da5dbfa6d4677f6aab0e905e0a1fdb0dfea016de8241562ca3366968211aa7c8a258e205664f8740a590ac5314a12f32788f50d4af2639f4893c08234baae198b4c20d136bcc34f26907b9da2a4f98633a76d9a990399ee39e05f2ae586081f2ddc88fb48024a747283eff9045d7fbb29cd172bc6307518b45eb90a9665e6cecd4525c147cbb0a77665f100da40d9b117f57e9864553c5e4fd86353"], 0x0, 0x0, 0x0}) fchdir(r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x46800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) r14 = fcntl$dupfd(r12, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$cgroup_ro(r14, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r15, 0x40047438, &(0x7f0000000480)=0x1) 01:23:28 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x5, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r3, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r4, &(0x7f0000000380)=""/105, 0x69) r5 = open(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) r7 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r7, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="940000000a18cf44af0106b433595d953fbfb116eb241e745de06729eab0ae08f3a1e288edcd0805fb8db2ad7f5f005c7d734ac0a1f62d04d85d50381fb08202167fd5a45d80067bec40be938417f7a14fa74bdf427fdd00be9d1356ef3a8810628173417244f738185c8f6a7b676b02e06963c7f9250000000022d40795814b0c97201c09000000dd76b37f149c9f06a4835eef6e69dfa6fb7826aa5ea527fa774b4538a3827cd147bad3119f94b50e116024b3447ce0c4284f8e52b71f4cc403a888b2f3fe952a72cf4ab8b5a0fd232327e529e39c74bb9e080217b9079d10a70a6a628f3a4f970e69add9e26013cc476e50f7ba", @ANYRES64=r8], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00032abd7000ffdbdf250f00004400010008000b00736970000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a00000045fe07002100000002000000080004000200000008000400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xd0) [ 699.003415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket [ 699.329463] audit_printk_skb: 39 callbacks suppressed [ 699.335436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket [ 699.336239] audit: type=1400 audit(1575422609.043:852): avc: denied { create } for pid=19578 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) open(&(0x7f0000000000)='./file0\x00', 0x252000, 0x1f) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x82, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x7, 0x7f}, {0x7, 0x240000}], 0xee01}, 0x18, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'sit0\x00', {0x2, 0x3, @empty}}) socket(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) dup3(r0, r1, 0x0) 01:23:30 executing program 5: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x36) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ftruncate(0xffffffffffffffff, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='se\'\x00rity>evm\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a7488460373f2abf296fc06065478d7a084c6ff8dabad01b9c565379a379e34d76ece372996ca1b89371e98a780c9eab4000d49d7f3d3066e90c4c70418f5f31ba6da3010000000000000093e9648275fd9d6ca2a4b28efcf7ff619e3d291a8abf"], 0x1, 0x0) read(r0, &(0x7f0000000200)=""/250, 0xfffffe8a) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd2(0x4000002, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)) getpriority(0x2, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:23:30 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r2, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f0000000580), 0x25b) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r9 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r10 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r12 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r12, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) write$binfmt_elf32(r3, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) fcntl$setstatus(r10, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r15) pipe2$9p(&(0x7f0000000480), 0x4000) r16 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16}) fstat(r16, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r21, 0x200004) sendfile(r18, r21, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r21, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r20, r17, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r9, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r13, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r11, r12, 0x0, 0x180003) 01:23:30 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x5, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r3, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r4, &(0x7f0000000380)=""/105, 0x69) r5 = open(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) r7 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r7, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="940000000a18cf44af0106b433595d953fbfb116eb241e745de06729eab0ae08f3a1e288edcd0805fb8db2ad7f5f005c7d734ac0a1f62d04d85d50381fb08202167fd5a45d80067bec40be938417f7a14fa74bdf427fdd00be9d1356ef3a8810628173417244f738185c8f6a7b676b02e06963c7f9250000000022d40795814b0c97201c09000000dd76b37f149c9f06a4835eef6e69dfa6fb7826aa5ea527fa774b4538a3827cd147bad3119f94b50e116024b3447ce0c4284f8e52b71f4cc403a888b2f3fe952a72cf4ab8b5a0fd232327e529e39c74bb9e080217b9079d10a70a6a628f3a4f970e69add9e26013cc476e50f7ba", @ANYRES64=r8], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00032abd7000ffdbdf250f00004400010008000b00736970000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a00000045fe07002100000002000000080004000200000008000400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xd0) [ 701.010312] audit: type=1400 audit(1575422610.723:853): avc: denied { create } for pid=19600 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 701.070115] audit: type=1400 audit(1575422610.773:854): avc: denied { create } for pid=19601 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 701.122270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket 01:23:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) personality(0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_int(r3, &(0x7f0000000100)='io.max\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x40a40, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x11, 0x80002, 0x0) getsockopt$packet_int(r9, 0x107, 0x14, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x20}], 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}], 0x20}], 0x1, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}], 0x20}], 0x1, 0x0) getgroups(0xa, &(0x7f0000000240)=[0xee00, r10, 0x0, 0x0, 0x0, 0xee01, r12, 0xee01, r14, 0xee00]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) 01:23:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 701.528405] binder: BINDER_SET_CONTEXT_MGR already set [ 701.544710] binder: 19643:19644 ioctl 40046207 0 returned -16 01:23:31 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1080, 0x29, 0x800, 0x70bd2b, 0x25dfdbfc, {0x19}, [@typed={0x8, 0x63, @u32=0x4}, @generic="9688a35195e7a68b1122f8a1f61b8f3aa5081a0259ec0eb119853d5bf617e802da0a0c9fd0742daee408dd8191e4d49a72eaef98f91a7988c26acf", @generic="e4bc25ae5295bf185e625b87441cbd2075dbcb268759d2d1d63666026b31be6208fbf327d8f441bc2df00efcaa6cd283675bb9dfe86c1e85ab07554b668875030b3cc8dcd050f29429e5b25f2329758dd43d96de9b446573dd670f1e075e0b97c93dc5b8d9644e44b1ad5e2eb5fb0a0f77c92f0014e3224db1c35ed2ce9a58c5ba0102ea1cb691c9222fa324472e002e7916752b5aba5eae07459305cd5fef6f1043d6e563a01527dd05dbd2f11e4ce6a24b120ccfbdd71a42ab86878d1ace032eb7dc9a7028fa6e74ae6fa35ad8fc7d17e2fec6e23aa6a8e3d34e2cd39233dd40d706a8a620394114d4517b435a9b31150868a071ef5c04415fd45cd936b9a684a08410f13d9e79ffb0299597c7c09c16cf9affa36881e721e4f03069657a6ba30ad004af87d44e55fec5d6b788ade9c1549db028f75503ebc73b04ed382513f1f4e66997be17079aedd7c1ef91708f76dd963d43fe6e6447fde78d10684a92ad324854d3ab334105eef8a2d719a32d2f3f522fbb05a2d44f51e2341cf8d97e86ac41ea0e56cf7862b325f11ab1df10189828c83511b54ccd4bccdaa89a8ec8a59c4370b2b3585f29a625022436c85781e420be3c0b90cadd6b4a910103270cbc7794867ead4e54f8f204a4266888de849400bb779fffbeda9dba51079327b2c04d6e8e50b84045808268f5bc39d8928e884f46372dd69e0293b6cbd1d0f8a0d0939df7dc46171ad7233a2076138f9e799bf5fa89b33f812d0b6a437af81012d8ad573e51395027723307e8d160800aa64813ea060974e3006f830332ada096ec9c5faa4ff86b83b2d0d018867e1df9ae64ded50290d9908f5c58a78a4436554c9c8ce9d20216ccc7a3852ca9cd88bf6e7959cfada57c09786cf163d3967cab2823672b24fcc1d0c45e4d8ca1ee7c40da3f8c29562ddc7b80b8fe8b798fb5ea4ce174f91928a5df3280abf0041e2762053c7bdfb4172636c639c52d6030ce9195479cfa238b5041773b99008d0c139fd6eb77a96aa0fb001856c5d33f7e2e43e0867e1c71096922ed7ec2018008c2a0c83679c948af67488a13873654aca9e8d6646eb2e64d55b4a3de66a7e91eb79aece39f6db4b4605ac65eabc73b4417be56553565228322b4309cafc41c767528f5d6733978f8e134fac160da7a053ec1e1adf1b90a404b88b851ebc75dcedfb59f553dd199acfdace3862caa4e3f24a29a3274d013a10ad941b8f2f06f4be14d24e69b305153ea38b1b7d3ee9224392cca3e7e085782f4d1083d43a8eb817f3e00c5d38f237affad9700633bc4c6016e34c0a923e86e3477685779ee1cea1f2bc8e21eb8f7878deddd190dbb584eb1d4954d904e8ae8582c25bedb9d46035efed1e87657ffc55f9f935970b5f9668b994c17d585ff39195db33e47df851f8e46db094fb42d2755366dba586b9c0ed0673d0ca62b7da10f90efb016ac6d1d042bccf723aabe7717321fee6f67ab112b731180691d1b0309594ccb03d130c4239b525610ad052242fd52eaeeb758442836756365c4f2b93d62b663b61c135297cc4a31f329e7e1de4d1c6e1cbc97566faf483d4c1917b1c7d5d01da7a2bddede9e3d8f2dfd83522238e4acfc6ce8805db9fa7b24ed69a27a5c6bb89fa44e132edf75dd288412cb65f4418b4176568b186cda5f7023888efeb27d6718e9b9e1bfb0d21396abb4c1ffc4d3c1ff0332533f6cc754ccf0bb0e5454906245b789e10e1f4eef1c3ef306f2d1981622af33c3af872138149b54c09524fde1e611a475a665d8d8402cb2dcb49915b1c9c16f3a0ada27500269dcd30688b618aa5c8ac371d6a4b9eb5b43a4d7d6c9b4dd76dc3bae9a7269f147350eb88f6db9eefc74beb1015e892ad4be160321b0129e424f5e070322d17381b66e44307b15ec6ebf1ae4f16cee2dae735902c7763e990bc9bc3a6e31b8e3da773c96822b821506da4ef15b93e8aa00ce780b8d337be5e2e7d59d35f372f45081a60752d5947118e35ea8528f6eb59de54bd6751ecc9219a98dd4108c679633c55d541e452c539e443641b8c1173009d0853be238aa116729de8459e246e3a94cbf9a407cc6b16e4f13a0645263841e44a547050c6350d8dbc20ed85dccf774c0e7d8fa0fdcbe0e31b301b04cf5c83715536d2d24611caad7a6e3db2681fc289ae7531df18fa0e6ab8f65d2bd4508faf06ac0e3a1c4d403ab3b980623340775439cd0fc95a551247a3b398082e9c1f00c95ad4be8dd6fe7630057fd18340f290ed874b660f8f12362dea5e30c7185a1a80ca5b2ebd381887d8f8222fd121aaa4f83eaf1778cea0628cde707655563a1518f6eb6709beac11806c203dcfd06c503d7d15858364d16a70a70f08c041ff972c4a35a3dc34bc95c0b941db6f532a75622ad8cd8d4e8a56c41591e4180917e15a4aa718c62e8eaf5b3e58af50d3148bb975b0c00e04dcf45087cc1e8104467fb6ff77fed793399eeaccc9bdf7750eec0be02b2bdac089feb0aa284b58651093f26dc19865052159a491fdc0fbd1950c51405eb953d4bd58c9756b5eebc2db1ea99ab27def093d23aebfb2d278a36c30944bf5146e77b5de5ba5ae6f54073fb7c366d6913b75585e72ac25bb9968415b1a2baab2dceef135d0a6630d65960c206c2718a6829b9615d6cb9cc330fda6274af955ccb95300b4cee6526dbe86e5d4f2759b3a55503c742d7675970569c98b00a1edc6f5f985f7fc907208c06d1c5dc07f9826bf7799d75ae0d92c1ff85d668b7f41f6f29320ae441fd000ce4a3a60159ea23cb72e0b162a7af8ad7255a08baab26d6f4a269c339e60e7973a00e00c0c7258e88e5c334a4e23d6f34dd60c50d03c1cd135e9216f796ff5c09951535399633207e4fc6b22dbf1a2eeb4cb9166793442145d9ef964bdb02e1f340c6e9d601f63e96a7a474b310f139fcd1657a7184da28ed905fe2e6da4f4e91aca87a685049cbb597bf5720f392b8b3edb434e354307c46d2c58639e8da0f5081cd9a691fd0de0c4979c7ba40e58cb1d381fba959e06319081065f0c33f76123b09cbcc35933720a099dc46e5f5895be35eb2f92024ee59f7797d027c58ea423247a92e5d5607bade47fb5fd7c71f559b30df9d51bd597a5c1bdb7b1a911a0447a02ee30d6adff2f0b2b09a6664fa13278ff329eb4a62afb579097f4aae14df3ac6ab9829619772df6381c9fbe9ea76796612d892207ec5d5fc6a3e15d2ca7453d6d38ab15dfe905f28ee228cb4b6513c3d6c58e6230cf567f532f386de5bae7ccbceba1105d0842ec4e4493165f7ee25888280320ef61ee377e97d2fd2da49403961e96903c8a1212a4d8fb3752fc6e19a69396a020777bd36ab61c277483f04f7f45abf6eb6cc98e75fd059c5eacc6ad293ae6f0a651b571e065e10f6d348df856b945481bf54addb4a50ecf1660149ff13108c86d91e9cfd7f96a1ccebcacededae8678937a5ae7c60a7c4d71180c747f84ce80983d6a9f2a405c6079d78b65d36a20fdb268333be794734e7c52adfa915dd786a357523fcff9eff8d3fe38184de1b839fefb7b37cbbe1e6a31f6b7cd276b5b605d0f70a3ee34bd01c76f0473e4219d1148b753e7271184ca894c9f92a3f8b7ed0cd28c3690d301f8cc19af4e33ec5420aee7ed61957d9a311b5800985857ae1e8f973eef1fecb58aad897fc254949a6c096dce1171cccbb9f06b7a9064664ab361727333722e48f0f7fc4db17d4ff6c8b81563d6f646a7cf16395f91a5e889fe1b390bc2e333bd23ab82a9353a995a5ada00dc0ccd1175049f2a5ae59f6f06f7d6f4fb38fc124a03a8213a9c368635a573b70def41d73295a7fd87e02c12e18e3cf096b35b54982d328934e61b0171cc716cc5070ace4eb52b970fab107908272f52e9498af3d86abfa0134aa764a70af8bd50f0042e49389e82341337efe3f71f8e631307f3739d0e651b22501d40cbebfaf3e069eba12f072122026dc94d72b8ee8901aee8baa66acdb6a280e4cf55ec3bedb740474951aa0e82ae70d2a0fa4baa4f7df98a187b7f1ef47b41daedb795ad8d66fbbfab4422152fe0efddc6924866bd84c55319f85135a8e7c90f8c2aac7764f2259ae994561bc01476fbb237980e94b6f63ea48d79fdf60c8d5708d7065e154a07865a0ca28ddb315d4dba39bcc8484a94a01ea2a9333de0f435ff4371e907a011f749acf0164ad12fdd36661cff9a78a55e0eb729984d0725d809ccfb068f1ca060e0f6c9f9265e2101f2282e36eea57cfbddbbe9b98f566465b1142c6a209dee99b2eedac430047bb02d14ace27d38e97e4b17e53b6011b1be5887716a76392d8430e4a51ae98aa71eade8f9569a2e20c64c1b069287057c9eb6ffdafc2a60961237270918b84800687b72bd4e7bada120401d5fd216d080290caff5c6d20b3c07f45a7236dc2be6ad3b4ac706517b9bb8c162b3368914028cff0f599c4de4965a2d9334f0d84cd070fc88fd38be05d53793b5ae0559f400cb2c512f75603a34906fcfd58a964e642b65986e353d3526bd00f79622503fd5f7a9c3a78ae9ba07605a1f0e23c3a2574ee950b5e52c79ce6ae831a93dc7c8212695ee8b70d690bf4d2d14e07929e2ffbfc6150606c972505d948c79732e50f78b5cdc38fa33bbc6f1f07cd6449f1ec56b5d980927a32ca0389d6b100560769aa155a0dbaad1cf101c03f3057d1b9c34a34c9588181dc18dc5a1737dea00f48c28db1f45be5da4fc7f7b77b2163d977e74c5d652b435b5646e8ce6c71c536fbcb77364201e4e7fdbfa68de9f83f55eb074201c2e68d9ea0eafa502cf9d593c3937692745baf6bb574ce7c883d538f6dd5fffb7fdd2adfccd50f08860eba36931afd6e8b4eaeffe4d1e893db420a3dac6b1b5780b6ef369c44d0beededa05e81941d30b35fbac38e4c201330cc603400d9c89e22a550faf1d1158ab54a71b9ca1d36995d82ae74214a7ff4e4d69523ec3d36e3dfd1037dccf63da9712e685a74a0886dc732b40d108aa6a371a54a48baeb1c519947134d85be594a9a014358354b4aedf7100c7b523e9e59d715ae69043c10762906623771d1ec33d8b427441743e70479c0734ce327ebc6b7c943832068e4109462463da90ca2b6521317c920d3f88e2408352244f175d67bb0720cf1fd9cc10569d4737ee27025e0a0f95b71d190ba186a491f76e3f945a2da918005ad710627ddfd92771a367fe5b1adab585845fcaa41833441ef47809a11933a3c1ad1284372088812e8d2bd91fdb013403c351ab4edd7a3f71b8a78e25baf5ec95549caa01876737f1b634b46995da15cd0cabe38e7849a5f93ab48d9c3cf3fc1dae6c66ce8620bc89a86d9d43a75d52f9e0348db35d4a6c6d3f23b021a924e9d2af90f501a060779e09a200596a848a7348756c948e2b3c38a5f4a2dd73b69cd23e1564c4ad8a86200c2b8edb391307b6e9af82d376f6d2c44a23b3a6b53573f13a53864e6589851bc70b25deaaf53fcd535a79f389e02acc914701a9c050320d6ac79209e3bff25cec826d6d1b7dbb60757a97cb385c5753f21a17cb25abca6a69ae83c9a4662fbd0fa312342eada43935f66610db74d5a6ed2b1a0498a2592a4b6aa27ee9cd97b29beb4f15f488e05b3511429275a0648b876bcb5d0539b1b833ef801418b778ef16cb671b8ef73f240e8bd254f842ce84d97ec899a28ca765bcb499b62c6516f6f9c315794f9625abe4872141ae747dcb02d611cdf7821404bf683ffca6c70ea9792e028a27814e3bb5aad6e0ade94549af4caec65", @generic="70d3aafc1a42d385d81515949e90068703bd3ed8fbbff9f3e1f4a78e82d77d6eb2", @typed={0x8, 0x24, @ipv4=@empty}]}, 0x1080}, 0x1, 0x0, 0x0, 0x40000}, 0x80) eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000140)='/dev/input/mice\x00', 0x2) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0563244000000000116348400000000000000000000000000000000000000000000000000000002c000000050000000000000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa1f7e57c6b3696983e6c508c5d3f3796eb1beac850d7ac3b2c441eb81482a2403e431d5f35719d8ccda1a3ba9883b6252f77d3fe13c515b0229c06a382d3906bc6fc69571a15c7831b08fa6aee799341424bd328df01975bbee8a841722307dd2d9da6ca130e3ea38ff255ad220cf54794ede43b5fa208698c77e"], 0x0, 0x0, 0x0}) sendfile(r4, r5, &(0x7f00000001c0)=0x101, 0x20c0) 01:23:31 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r2, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f0000000580), 0x25b) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r9 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r10 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r12 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r12, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) write$binfmt_elf32(r3, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) fcntl$setstatus(r10, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r15) pipe2$9p(&(0x7f0000000480), 0x4000) r16 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r16}) fstat(r16, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r21, 0x200004) sendfile(r18, r21, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r21, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r20, r17, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r9, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r13, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r11, r12, 0x0, 0x180003) 01:23:31 executing program 5: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x36) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ftruncate(0xffffffffffffffff, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='se\'\x00rity>evm\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a7488460373f2abf296fc06065478d7a084c6ff8dabad01b9c565379a379e34d76ece372996ca1b89371e98a780c9eab4000d49d7f3d3066e90c4c70418f5f31ba6da3010000000000000093e9648275fd9d6ca2a4b28efcf7ff619e3d291a8abf"], 0x1, 0x0) read(r0, &(0x7f0000000200)=""/250, 0xfffffe8a) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd2(0x4000002, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)) getpriority(0x2, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:23:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:31 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x5, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r3, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r4, &(0x7f0000000380)=""/105, 0x69) r5 = open(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) r7 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r7, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="940000000a18cf44af0106b433595d953fbfb116eb241e745de06729eab0ae08f3a1e288edcd0805fb8db2ad7f5f005c7d734ac0a1f62d04d85d50381fb08202167fd5a45d80067bec40be938417f7a14fa74bdf427fdd00be9d1356ef3a8810628173417244f738185c8f6a7b676b02e06963c7f9250000000022d40795814b0c97201c09000000dd76b37f149c9f06a4835eef6e69dfa6fb7826aa5ea527fa774b4538a3827cd147bad3119f94b50e116024b3447ce0c4284f8e52b71f4cc403a888b2f3fe952a72cf4ab8b5a0fd232327e529e39c74bb9e080217b9079d10a70a6a628f3a4f970e69add9e26013cc476e50f7ba", @ANYRES64=r8], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00032abd7000ffdbdf250f00004400010008000b00736970000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a00000045fe07002100000002000000080004000200000008000400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xd0) 01:23:31 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x4, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x52, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="056304adafd17e5568b5ff1bfffb000000000000000000000000000000000000000000009a00005b0000000092096ee9e100000000000000059ba420aa34247406872e88f5555c41b000000000ffffffffaa"], 0x0, 0x0, 0x0}) fcntl$getflags(r1, 0x3) fsync(r2) tkill(r0, 0x1b) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fdatasync(r3) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 701.950157] audit: type=1400 audit(1575422611.663:855): avc: denied { create } for pid=19651 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:31 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x101) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'raw\x00'}, &(0x7f0000000280)=0x54) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x1a1043, 0x0) pread64(r4, &(0x7f0000000340)=""/174, 0xae, 0x46) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000000400)=""/176) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 702.023129] audit: type=1400 audit(1575422611.733:856): avc: denied { create } for pid=19662 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 702.110009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket [ 702.121716] binder: BINDER_SET_CONTEXT_MGR already set 01:23:31 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x4, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x8, 0x1, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 702.162732] binder: 19684:19684 ioctl 40046207 0 returned -16 01:23:32 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/inp\x87t/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:32 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:32 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) open(0x0, 0x80, 0x2) r3 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000000c0)) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r5, 0x0, 0x8000fffffffe) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) 01:23:32 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x5801, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x699087299222a9ee, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x3) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) [ 702.816750] audit: type=1400 audit(1575422612.523:857): avc: denied { create } for pid=19704 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x7fff) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_drvinfo={0x33, "28252c037cb97de23da76cf990753ea1939890e5c2ac15acb5d7f84ac26abee4", "1dd9ede0803733d254df12aad7417f4a92a9441e3e77cd8d1938b2750a966c64", "ab709bc4b7a0aaa9b17ba5fd1b94c14c2bbea9fd1245bb570f207d5e117dda42", "5173db27e7a019b9f3c52b9efa19f539a8c632686a1eaed667173817438ea199", "1532b878ea7c88766df4362c72127e575aa0b0c60ef182cba0fd61b62c510958", "0a5f6f9c19a55bc4cd07e1b7"}}) 01:23:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:32 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x5, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r3, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r4, &(0x7f0000000380)=""/105, 0x69) r5 = open(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) r7 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r7, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="940000000a18cf44af0106b433595d953fbfb116eb241e745de06729eab0ae08f3a1e288edcd0805fb8db2ad7f5f005c7d734ac0a1f62d04d85d50381fb08202167fd5a45d80067bec40be938417f7a14fa74bdf427fdd00be9d1356ef3a8810628173417244f738185c8f6a7b676b02e06963c7f9250000000022d40795814b0c97201c09000000dd76b37f149c9f06a4835eef6e69dfa6fb7826aa5ea527fa774b4538a3827cd147bad3119f94b50e116024b3447ce0c4284f8e52b71f4cc403a888b2f3fe952a72cf4ab8b5a0fd232327e529e39c74bb9e080217b9079d10a70a6a628f3a4f970e69add9e26013cc476e50f7ba", @ANYRES64=r8], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00032abd7000ffdbdf250f00004400010008000b00736970000c000700500000001700000008000b0073697000080005000400000008000b0073697000080001000a00000045fe07002100000002000000080004000200000008000400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xd0) 01:23:32 executing program 0: r0 = socket(0x10, 0x6, 0x6) write(r0, &(0x7f0000000000)="240000005a001f000307f4f9002304000a04f51108000200020100020800038005000000", 0x24) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x1, 'ip6gre0\x00', {}, 0x6}) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0xa45874d6d8fb4f73, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa9a}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x50000]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000040}, 0x80) [ 703.064661] audit: type=1400 audit(1575422612.773:858): avc: denied { create } for pid=19733 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:32 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x5, 0x101, 0x9, 0x31aa}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$loop(0x0, 0x4, 0x51d00) write(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="24000000210007021dfdfd946f61", 0xe}], 0x1}, 0x0) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r3, &(0x7f0000001880)={0xdc, 0x75, 0x2, {0xd1, "b6de5f52fe32255ce5db4fca2881b1605eb67b6406d611210c068d5c4da9cc8bc394d2d9de867552c8ad6370996eabdf130aa409008ab28ac99dfe802991050163e998ef6536c4b00c4723a5790430d46c96cb749a86b36a29a16e29ed19d0bd03b5fcd7f47e83e1c2655a98fb09c92ad73b3a0c3d265df4d63689cc8e3c6c19c2c7cf78c05653757f92ac23475262a40db0e9906d381efa549a39448bf1dbe42ca61bb9c1bd73973abc751a39f2fb7dc048c16d502357a931f39422c9ca6cfd1ae34e3fe3ecee532c4ae4b31450c31033"}}, 0xdc) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESHEX], 0x4240a5bb) io_submit(0x0, 0x7, &(0x7f0000001840)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0xb54d, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x683cb2b4bc11b951, r1}, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x2000000000, 0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x2, 0x0, 0x2, r3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f0000001a00)="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", 0x1cf, 0xdf9b, 0x0, 0x3}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x8, 0x63, r4, &(0x7f00000007c0)="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", 0xfffffffffffffcbc, 0x2, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xffffffff, r5, &(0x7f0000001800)="86b7e0ff9e6590e8da72fb6b63de2056a0bf4c7d57ac3b65ad10674df9a825fbdf71b923a1dbde9789946dd6be2b3c963133cd55", 0x34, 0x0, 0x0, 0x5}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0xd57ea18703433360, 0x8, 0xffffffffffffffff, &(0x7f0000001640)="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", 0xa6, 0x9, 0x0, 0x2}]) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r9, r2) sendfile(r7, r8, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) [ 703.193919] audit: type=1400 audit(1575422612.903:859): avc: denied { create } for pid=19733 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 703.239006] audit: type=1400 audit(1575422612.943:860): avc: denied { create } for pid=19731 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 703.282684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket 01:23:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xbfff, 0x0, @empty, 0x3}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x3) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000080)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r5, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_ROPEN(r6, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x80, 0x2, 0x6}, 0x6}}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@loopback, @in6=@rand_addr="7e03dd700ef70d50939cf100174a8df3", 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x1, 0x0, 0x5, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:23:35 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000140)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:35 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000600)=""/13, 0xccacf294) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000080)=0x2) getresgid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000140)="b6bacb23ff4cfd32dfedb4b98431d2bd9d5d35a01cb23faeccf7c2cc4a7f4d7c82d94a79a8a83052ce9d8fac0a9abd7e966ebc6298e2883838c1784391893704ed35e6ef2060ae6930fe0c9f1fa2c3e9c3f8113d6615278b64e142ff9417e0e3df27d53c7bc954e3b82b1f", 0x6b, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 01:23:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@mcast2, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409"}}]}, 0x158}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4d499baa9d6f46f247940dc52ad23f9bbddf45c578b7645b1fdbd8bbdd1fedc1e5c6350ea9ccc69aef5681d3889fd8e88c6d554ab3a142492d7c091c9efded12c3328bcd65f6c6e4fa8c1612195d27a2750161ebdfbfbd8bbb1ae15f602a254afc99e70972841113cdc6c03bd2dd1931c774776d29ffa42345385e6626c7182f8b80f0d634dd58261f6b4628173dd9191f19235bd33278b17bb93c28a94d21740f26b84eff535799cc8798ba620b01de7609d74564227dec8e2df51255443506607ef6837e7fd7110e90d06c2af5c8ff30454d8557dc2d", @ANYRES16=r4, @ANYBLOB="20002bbd7000fedbdf25010000001c00030008000500ac1414aa080004000400000008000500ac7c71101e0001080004001c00000008000500170d4146"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc810020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='V\x00\x00o\x00', @ANYRES16=r4, @ANYBLOB="f31c2cbd7000fbdbdf250d000000380002000800080080000000080005009906000014000100317a23f10a22fa36eba8393d8b528bdf46f91448d92e8688da770cb00124336608000d0000000000080002004e23000024000200080007000300000008000e004e24000008000d000000e0ff07000d00020000000800760000f8fffffea7b633d4b56fbad808530c947923"], 0x78}, 0x1, 0x0, 0x0, 0x4002014}, 0x1000) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, r4, 0xf624a4001974e10a, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9db}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10f7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6191}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x2c000805) 01:23:35 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x5, 0x101, 0x9, 0x31aa}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$loop(0x0, 0x4, 0x51d00) write(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="24000000210007021dfdfd946f61", 0xe}], 0x1}, 0x0) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r3, &(0x7f0000001880)={0xdc, 0x75, 0x2, {0xd1, "b6de5f52fe32255ce5db4fca2881b1605eb67b6406d611210c068d5c4da9cc8bc394d2d9de867552c8ad6370996eabdf130aa409008ab28ac99dfe802991050163e998ef6536c4b00c4723a5790430d46c96cb749a86b36a29a16e29ed19d0bd03b5fcd7f47e83e1c2655a98fb09c92ad73b3a0c3d265df4d63689cc8e3c6c19c2c7cf78c05653757f92ac23475262a40db0e9906d381efa549a39448bf1dbe42ca61bb9c1bd73973abc751a39f2fb7dc048c16d502357a931f39422c9ca6cfd1ae34e3fe3ecee532c4ae4b31450c31033"}}, 0xdc) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESHEX], 0x4240a5bb) io_submit(0x0, 0x7, &(0x7f0000001840)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0xb54d, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x683cb2b4bc11b951, r1}, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x2000000000, 0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x2, 0x0, 0x2, r3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f0000001a00)="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", 0x1cf, 0xdf9b, 0x0, 0x3}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x8, 0x63, r4, &(0x7f00000007c0)="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", 0xfffffffffffffcbc, 0x2, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xffffffff, r5, &(0x7f0000001800)="86b7e0ff9e6590e8da72fb6b63de2056a0bf4c7d57ac3b65ad10674df9a825fbdf71b923a1dbde9789946dd6be2b3c963133cd55", 0x34, 0x0, 0x0, 0x5}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0xd57ea18703433360, 0x8, 0xffffffffffffffff, &(0x7f0000001640)="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", 0xa6, 0x9, 0x0, 0x2}]) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e5e2) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r9, r2) sendfile(r7, r8, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) [ 705.451165] audit: type=1400 audit(1575422615.163:861): avc: denied { create } for pid=19772 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:35 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000040)={{0x3, 0x0, @identifier="e6be2fd808d5c3286fadf6fd9a52a81a"}, 0xb3, [], "ec3f6d66d2dccd7179e168854cfca60307b8996b46df3b41f5a27be831f19ba4dee0c22d212926121e6ce21c70bc92adfaa55dd0ac7710c9a1de1c514da800bc803477a68b07c8d6daa2e489a57c1ce8953fddcd9d3697910295dc066105dbee9395c972da0dc8ad163708516587c0bfdf270a959a0dcdb9460eb1d101a9860acb767f9e60ade0c4a1f1759a91952a5efb842b0f9838f9c494588ab9f03296abd40ed8a4dbb4b6cdd3715522bf9b97ca44aa24"}) 01:23:35 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x14}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) timerfd_create(0x4, 0x80000) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000001c0)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r2, 0x0, &(0x7f0000000000)=""/3) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/rt6_stats\x00') write$P9_RSYMLINK(r3, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x70, 0x4, 0x4}}, 0x14) 01:23:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x4a30e167f02e07b) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x27) ioctl$LOOP_CLR_FD(r0, 0x4c01) 01:23:35 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) accept$inet(r2, &(0x7f0000000640)={0x2, 0x0, @broadcast}, 0x0) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'bcsf0\x00', 0x4fff}) ptrace$pokeuser(0x6, 0x0, 0x2, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) open(&(0x7f00000004c0)='./bus\x00', 0x41, 0x8) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x0, &(0x7f0000000300)) sendfile(r1, r4, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r7 = syz_open_dev$binderN(&(0x7f0000000500)='/dev/binder#\x00', 0x0, 0x400) fremovexattr(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="736523714047b9f9f2195cf5c3924605a1bc726974792e282747504c7b656d313a00"]) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x2004c0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x200, 0x0, 0x0, 0x8001}, &(0x7f0000000140)={0x0, 0x7, 0x7b, 0xffff, 0xfffffffffffffff8, 0x35b0, 0x303, 0x8}, &(0x7f0000000180)={0x23, 0x0, 0x68c6, 0x1, 0x0, 0x1, 0x2, 0x3ff}, &(0x7f0000000380)={r9, r10+10000000}, &(0x7f0000000440)={&(0x7f00000003c0)={0xfff}, 0x8}) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) nanosleep(&(0x7f0000000100)={0x0, r8+10000000}, 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:23:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r2 = socket(0x4, 0x3, 0x9b) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = socket(0x100000000011, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}], 0x11}], 0x0, 0x40014) r10 = getgid() r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}], 0x20}], 0x1, 0x0) r13 = getgid() setgroups(0x6, &(0x7f0000000040)=[r6, r9, 0x0, r10, r12, r13]) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b08160df7db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) write$FUSE_DIRENTPLUS(r15, &(0x7f0000000080)=ANY=[@ANYBLOB="10000002000000000100000000000000"], 0x10) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r16, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r16, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @local, @dev={0xfe, 0x80, [], 0x1f}, 0x0, 0x0, 0x0, 0x380, 0x0, 0x40000, r17}) r18 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fff) ioctl$KDDELIO(r18, 0x4b35, 0x400) 01:23:38 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34662605"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:38 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='fd/4\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r5 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r6 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000240)={'ip6gre0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x323) dup3(r12, r9, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r13, 0x400454cd, 0x7) dup3(r14, 0xffffffffffffffff, 0x1c0000) readv(r4, &(0x7f0000000580), 0x25b) r15 = socket$inet(0x2, 0x0, 0x0) syncfs(r15) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, 0x0) r17 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup(r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) ioctl$sock_inet_SIOCDARP(r19, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x4e22, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r17, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, 0x0, 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x0) r20 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r20) r21 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r22 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r22, &(0x7f0000000440)=[{&(0x7f00000004c0)='\x00o', 0x2}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r21, 0x4c00, r22) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r20, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r24, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r27, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r27, r25, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r20, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000001cc0)=""/102400, 0x19000}, {&(0x7f0000000680)=""/47, 0x2f}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) read(r23, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r21, r22, 0x0, 0x180003) 01:23:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000100)={0xf}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fadvise64(r3, 0x0, 0x0, 0x4) 01:23:38 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:38 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) accept$inet(r2, &(0x7f0000000640)={0x2, 0x0, @broadcast}, 0x0) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'bcsf0\x00', 0x4fff}) ptrace$pokeuser(0x6, 0x0, 0x2, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) open(&(0x7f00000004c0)='./bus\x00', 0x41, 0x8) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x0, &(0x7f0000000300)) sendfile(r1, r4, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r7 = syz_open_dev$binderN(&(0x7f0000000500)='/dev/binder#\x00', 0x0, 0x400) fremovexattr(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="736523714047b9f9f2195cf5c3924605a1bc726974792e282747504c7b656d313a00"]) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x2004c0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x200, 0x0, 0x0, 0x8001}, &(0x7f0000000140)={0x0, 0x7, 0x7b, 0xffff, 0xfffffffffffffff8, 0x35b0, 0x303, 0x8}, &(0x7f0000000180)={0x23, 0x0, 0x68c6, 0x1, 0x0, 0x1, 0x2, 0x3ff}, &(0x7f0000000380)={r9, r10+10000000}, &(0x7f0000000440)={&(0x7f00000003c0)={0xfff}, 0x8}) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) nanosleep(&(0x7f0000000100)={0x0, r8+10000000}, 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 708.470053] audit_printk_skb: 9 callbacks suppressed [ 708.504727] audit: type=1400 audit(1575422618.183:865): avc: denied { set_context_mgr } for pid=19854 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 708.631328] audit: type=1400 audit(1575422618.343:866): avc: denied { create } for pid=19876 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 708.661994] binder: 19854:19863 ioctl 40046207 0 returned -13 01:23:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x1cdd81, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v1={0x2, "61cbb8123879a35300709901"}, 0xd, 0x91b5461c6482c54) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'team_slave_1\x00', 0x6}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0xfffffffffffffe9b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000100), 0x80000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) dup3(r4, r0, 0x0) 01:23:38 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x13, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x10, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r0, 0x0, 0x10001ff) 01:23:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 709.009098] audit: type=1400 audit(1575422618.723:867): avc: denied { set_context_mgr } for pid=19893 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 709.110874] audit: type=1400 audit(1575422618.823:868): avc: denied { set_context_mgr } for pid=19893 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 709.135889] binder: 19893:19896 ioctl 40046207 0 returned -13 [ 709.136839] binder: 19893:19904 ioctl 8912 400200 returned -22 01:23:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:38 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000140)={0x20, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000002c0)) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$TIOCCONS(r3, 0x541d) fsetxattr$security_smack_transmute(r2, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000400)) write$FUSE_STATFS(r2, &(0x7f0000000440)={0x60, 0xfffffffffffffffc, 0x6, {{0x4, 0x9, 0x37000000000000, 0x2, 0x7f, 0x2, 0xc2c, 0x6}}}, 0x60) r5 = open(&(0x7f00000004c0)='./file0\x00', 0x80000, 0x40) fchdir(r4) fcntl$setpipe(r4, 0x407, 0x1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x376e) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) write$binfmt_elf32(r6, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1f, 0x6, 0x81, 0x2, 0x2, 0x3e, 0x0, 0x5d, 0x38, 0x27e, 0x1, 0xffff, 0x20, 0x2, 0x81, 0x8244, 0xfffc}, [{0x60000000, 0xc0000000, 0x2, 0x4, 0x4, 0x9, 0xffffffff, 0x2}, {0x2, 0xacb5, 0x0, 0x7, 0x20, 0x9, 0x9, 0x9}], "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", [[], [], []]}, 0x1378) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000018c0)='/selinux/policy\x00', 0x0, 0x0) getpeername$packet(r7, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001940)=0x14) timerfd_create(0x6, 0x800) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001980)='memory.events\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) fcntl$notify(r4, 0x402, 0x19) fsetxattr$security_ima(r5, &(0x7f00000019c0)='security.ima\x00', &(0x7f0000001a00)=@ng={0x4, 0x7, "ba560a3c7b9f46f493d93ed13194920481"}, 0x13, 0x1) ioctl$KDENABIO(r5, 0x4b36) prctl$PR_SET_FP_MODE(0x2d, 0x60b35dabe9ef07f3) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001a40)='/selinux/mls\x00', 0x0, 0x0) [ 709.187929] binder: 19893:19900 ioctl 40046207 0 returned -13 01:23:39 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getown(r0, 0x9) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r4, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 709.507420] audit: type=1400 audit(1575422619.223:869): avc: denied { create } for pid=19915 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:41 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4(r1, &(0x7f00000001c0)=@ethernet={0x0, @local}, &(0x7f0000000140)=0x80, 0x6c518ca29c527627) recvfrom$inet(r2, &(0x7f0000000240)=""/76, 0x4c, 0x41, &(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10) r3 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 01:23:41 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)='mime_typeem0:\xcbmime_typemime_typevboxnet1@GPL.[cgroupeth0.posix_acl_access:$security\x00', 0x54, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000004c0)) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6(0xa, 0x400200000001, 0x0) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000740)={{0xa, 0x4e20, 0xffff, @remote, 0x1ff}, {0xa, 0x4e23, 0x0, @local, 0x2}, 0x0, [0x2, 0x400002, 0x0, 0x5, 0xfffffffc, 0x0, 0x9, 0x1800]}, 0x5c) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup2(r4, r5) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = memfd_create(&(0x7f0000000540)='syz', 0x2) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000580)={0x0, 0x4, 0x7, 0x80000000003}) ioprio_get$uid(0x3, r6) sendmsg$nl_netfilter(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xfffffffffffffd06, &(0x7f0000000480)={&(0x7f0000003b80)=ANY=[@ANYBLOB="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", @ANYBLOB="9ae73fa23da181cd8639c83b3dcb14dd8f593fa46c80279c051caf07758163a4d02d3edfeddaa54c5aaf5841677fc5237b57ac0fcc863bc6cf9ad9704a49c8179f6634883a7e5afd945054dd1938597442844a69bffdd7c715923fecf915f41579f765d12f96bdb560b5c58a74f52d0a0018e701e7b5051a68ab6bff34f63b4a7acf0af858906045d5a55b7f09041893d4b4cff8c02cb376e436017519a0825ef16ed40a3993d56c287c034724b68c3f4139fea7ffcc85add2bee34cbce7d79adf4e4930b60d123cfda52c", @ANYBLOB="931d1e45b304377f48d38b82547db198c2b948e9ecbfaca21c83bc8420f5d1a9b72048014bffbf88eab35933f550ef94ad222c5409869be6652e32bcb9aa19e57ae3ff92a5f93d915049702b6d3d4417fb3707f0c8ff22bffa1ebac790ed60bd33fd732c4a3256417c7fafe8fd78f3dde0505d1cde3f55626649c0b8914e031b150b410c31ad0fcde9ee97c295002a2ae575395ea25bc1bb29a813"], 0x10d0}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000000) keyctl$clear(0x7, r2) r8 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r2) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000700)={'\x00\x93/', 0x3}, 0x0, 0x1da, r8) r9 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) 01:23:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000100)={0xf}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fadvise64(r3, 0x0, 0x0, 0x4) 01:23:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:41 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getown(r0, 0x9) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r4, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:23:41 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x20000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xde1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x6, 0x4) [ 711.607376] audit: type=1400 audit(1575422621.323:870): avc: denied { create } for pid=19929 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:41 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/\xc3)\x00\x00ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x39, &(0x7f0000000500)=""/9, &(0x7f0000000000)=0xfffffe01) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='trusted\x18overlao.opasue\x00', &(0x7f00000002c0)='y\x00', 0x402fffc7ad378206, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="08e7c52101fddc75f0f9521a0f5c915b0fba60157813e0c87f8612f8259964230eaa070611757a09000000a75f9340a3f93c80815f9000006439ccda902954ad0d1f0be04bdcab742d121a2c1c26283f99b6f0670b11d1bbf52397fb2edaf4050191b27df9732429"], 0x4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000001c0)=0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0xffffffffffffff01, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_buf(r7, 0x29, 0x0, &(0x7f0000000400)=""/115, &(0x7f0000000480)=0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getpeername(r9, &(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f00000003c0)=0x80) ptrace$cont(0x18, r1, 0x0, 0x0) [ 711.644668] audit: type=1400 audit(1575422621.353:871): avc: denied { create } for pid=19950 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000580)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a0daa3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129bfe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce2200e9ce23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0x10000005c) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000100)={0xf}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fadvise64(r3, 0x0, 0x0, 0x4) 01:23:41 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000001c0)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000000)=""/3) capget(&(0x7f0000000140)={0x20080522, r1}, &(0x7f00000001c0)={0x8, 0x100, 0xffffffff, 0xf71a, 0x49f7, 0x8000}) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 01:23:41 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x0, 0x2, 0x8}, 0xffff8000}}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x4, 0xa, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6a21b23bd310105757482956cffc5a7034660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 01:23:41 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="7edf7e99f3f288fa60f1a5a8559dc134d0f52fbcc5245c2fc31c403a7cb787011089"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) lsetxattr$smack_xattr_label(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)={'\x93proc'}, 0x6, 0x2) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r2}, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/input/mice\x00', r2) keyctl$get_security(0x11, r3, &(0x7f0000000340)=""/30, 0x1e) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 01:23:42 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00w\x06S*6\xee\xa8?\xbd\xc1\b\x10s\xe3\xc76\x87\x7f\xb9\x1e-\xcex\x18k\xb9h\x9f\xe6\xe5g\xc0Q\xc8\xc5\xcb\xe7\x05\xd1A\xde\xa5\n\xcc\xfb\xa4-\xde\xa6v\xac\x9aw\x89P\xc7,\x1e\xf7\xfa\x1f\xa5\ak\xb8\xd6@n,H\x06E\xd3\fm\xe3\v\xadD\xe5\xe7\xaf\x85T\x85\x9a\xce\xcb\x8a\x01T,]\xbe\x06C|\xe8\xba\xfe5\xdaJ8\xb9[\xbbW\x9ei}Y\xfb\xb5\xc7\x97y\xf3>\x05+\t\x1f\x1bM\xdcM\xd2\x95\xd2F\xb6\xe6&\xa8\x84J\xe6\x15\x7ft\x9a\xe3\xcfB\x84\xa2o)\x92\xfa\xe1\x8bR6Sq\x01\x93\x8cV\xf2#!\xb2 \xdf\x00!S\x9f\xef\xf0\x05\xc6\xf9\x04\x88\\\x05\x93\x99}\x95\xde\x94f\xa6G\\\v:\xee\x80)\x87\xb9\xe0\x87}(a\x8a^e(\xe0\xfcl\xbb~\x03\x1fq\xd2\xfeD\x8a\x13\x92e\xe6\xf9\xae:&H\xa6\xd8\x8arT\x84\xa5XN4\xf2\xf9\xad\x9f\xdf\xbf<\xd7\xf6', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440), 0x12) socket(0xa, 0x800, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000640)="06c5defead00", 0x10) socket(0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xffffffffffffff40) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000680)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={r4}, 0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = creat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x120) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x8240, 0x8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000ac0)=ANY=[]}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000000c0)='./file0\x00') mkdirat(r6, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x41) 01:23:42 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getown(r0, 0x9) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r4, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:23:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) r7 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f0000000200)=""/67, &(0x7f0000000100)=0x43) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83950118, r6}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 01:23:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 712.730169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 01:23:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000100)={0xf}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fadvise64(r3, 0x0, 0x0, 0x4) [ 712.784154] qtaguid: iface_stat: create6(lo): no inet dev [ 712.855419] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 712.906405] audit: type=1400 audit(1575422622.613:872): avc: denied { create } for pid=19991 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 712.942010] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 712.966835] qtaguid: iface_stat: create6(lo): no inet dev [ 713.025937] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 01:23:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0xaa, &(0x7f00000001c0)}, 0x2c0) r3 = socket$inet(0x2, 0x4000000000080015, 0xff) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r3, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2200cf7d, &(0x7f0000000240)={0x2, 0x4e23}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x7, 0x8, 0x0, 0xe0}, {0x0, 0x2, 0x2, 0x9}, {0x40, 0x80, 0x0, 0x1}, {0x9, 0x7, 0x8, 0x5}]}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x7843c471) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmsg(r3, &(0x7f0000000140)={0x0, 0x137, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1fa0}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 01:23:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80000, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4d499baa9d6f46f247940dc52ad23f9bbddf45c578b7645b1fdbd8bbdd1fedc1e5c6350ea9ccc69aef5681d3889fd8e88c6d554ab3a142492d7c091c9efded12c3328bcd65f6c6e4fa8c1612195d27a2750161ebdfbfbd8bbb1ae15f602a254afc99e70972841113cdc6c03bd2dd1931c774776d29ffa42345385e6626c7182f8b80f0d634dd58261f6b4628173dd9191f19235bd33278b17bb93c28a94d21740f26b84eff535799cc8798ba620b01de7609d74564227dec8e2df51255443506607ef6837e7fd7110e90d06c2af5c8ff30454d8557dc2d", @ANYRES16=r3, @ANYBLOB="20002bbd7000fedbdf25010000001c00030008000500ac1414aa080004000400000008000500ac7c71101e0001080004001c00000008000500170d4146"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc810020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='V\x00\x00o\x00', @ANYRES16=r3, @ANYBLOB="f31c2cbd7000fbdbdf250d000000380002000800080080000000080005009906000014000100317a23f10a22fa36eba8393d8b528bdf46f91448d92e8688da770cb00124336608000d0000000000080002004e23000024000200080007000300000008000e004e24000008000d000000e0ff07000d00020000000800760000f8fffffea7b633d4b56fbad808530c947923"], 0x78}, 0x1, 0x0, 0x0, 0x4002014}, 0x1000) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xa8, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff5d01}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x10}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x71}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x40060) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) close(r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00') setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r7, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000100)=0x7, 0x4) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) tkill(r7, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200000000000011, 0x4000000000080002, 0xdd86) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r3, 0x4, 0x40000) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="96c6322ea684879088175969ec15e10d40e4719016cbc15a36a88c6c843e12b1f5cb6a73613ceec274", 0x33}], 0x1}}], 0x40001c0, 0x0) [ 713.219759] audit: type=1400 audit(1575422622.933:873): avc: denied { create } for pid=20026 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 713.266614] audit: type=1400 audit(1575422622.973:874): avc: denied { set_context_mgr } for pid=20026 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 713.347322] binder: 20026:20028 ioctl 40046207 0 returned -13 01:23:43 executing program 0: open(&(0x7f0000000280)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/softnet_stat\x00') r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)={@local, @remote, @loopback}, 0xc) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x20) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f00000005c0)) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x40000c9) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) 01:23:43 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 713.814624] audit_printk_skb: 6 callbacks suppressed [ 713.828331] audit: type=1400 audit(1575422623.523:877): avc: denied { create } for pid=20046 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 714.034382] audit: type=1400 audit(1575422623.743:878): avc: denied { create } for pid=20033 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 714.244817] audit: type=1400 audit(1575422623.953:879): avc: denied { create } for pid=20041 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:44 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x1, 0x2) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x121000, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/162) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000580)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a0daa3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129bfe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce2200e9ce23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0x10000005c) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000100)={0xf}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fadvise64(r3, 0x0, 0x0, 0x4) 01:23:44 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getown(r0, 0x9) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r4, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:23:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x7d) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "89df6144c7726a70803e268c07b5c3594ededf2bfab4ec09f2aaef1f56a40a77e8c9d3b275c1a1a4dc1af6b87fd62e4d2ba05d7beac025f08cbca6cf98da3ec2", "4ce350fe815ca73c7e00a797cd084759fc586f828cf5bd4d891fc06513c100a8231c4d6cd7a753f5aa3736f960fc7dbc75baefdabc27304fd48d5a6a9b467a13", "4a81b46b39ee342f487ea5c7ca96a756cc2bfa0217978e43f58021e2b899ac52"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_load(r2, &(0x7f0000000180)={0xf97cff8c, 0x8, 'SE Linux', "806e2fe0a0c2237572b003f6b0f2dfcc092978e21b349321d96a96180a88604afaa2d88a5160122fa08cd2ed6f6e434d2275448121a0f303f1aa874feb8ccd4f253ba0161aa9d5061d199512177db6a52c781a50f39ee361e2"}, 0x69) 01:23:44 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:45 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 715.434723] audit: type=1400 audit(1575422625.143:880): avc: denied { create } for pid=20067 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 715.461534] audit: type=1400 audit(1575422625.173:881): avc: denied { create } for pid=20066 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 715.492708] audit: type=1400 audit(1575422625.203:882): avc: denied { create } for pid=20078 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1e0, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x762f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4d7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x901}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5bddd12e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3b37a0b8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x60000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 715.705156] audit: type=1400 audit(1575422625.413:883): avc: denied { create } for pid=20103 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 01:23:45 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:45 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x389}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x4000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') 01:23:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r2, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="23000000290007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 716.178878] audit: type=1400 audit(1575422625.893:884): avc: denied { create } for pid=20119 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 716.229329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 716.287890] audit: type=1400 audit(1575422626.003:885): avc: denied { create } for pid=20119 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 716.350250] audit: type=1400 audit(1575422626.063:886): avc: denied { create } for pid=20120 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 01:23:47 executing program 1: poll(&(0x7f0000001400), 0x0, 0x0) 01:23:47 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000001980)={@random="93a259c8dbf5", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "00ac04", 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0) 01:23:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x30c82, 0x0) getsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c0000000000000018000000006bf1ceca73400b5bc479ea000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @identifier="b3a3cd624b5df8fd0e54ab92596f73bd"}}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:47 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x160800, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3466709e"], 0x4}}, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x1000)=nil) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000001c0)) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r3, 0x0, &(0x7f0000000000)=""/3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000200)="b855f4e3d6f8fc55ca835b500d7b39fa688ab50ff0fa3b7f6fe5d35220eaaba7ff86cde2741aa44ab5c2b37d14f99c7821514c2ab94a9c44d96e2ffbf9857b9e1dd2061a57fe28eab9e1cb7bc67464363244b376c0338f4a3466a0e0b90917940e1e97d43068ebc6") ptrace$cont(0x7, r1, 0x0, 0x0) 01:23:47 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x8f3, 0xa002) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fcntl$setlease(r4, 0x400, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:48 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'osx.', 'fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) 01:23:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r3, &(0x7f0000002440)=[{&(0x7f0000002480)=""/117, 0x75}], 0x1, 0x0) 01:23:48 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) 01:23:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/loop-control\x00', 0x0, 0x0) creat(0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:23:48 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000016) 01:23:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff40, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 01:23:48 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) preadv(r5, 0x0, 0x0, 0x8) dup3(r2, r5, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000700)=ANY=[@ANYBLOB="62726f757465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af05333f8569c045ab69b9468f93fc00000000000000000000000000000556b65be913ea9d36574657932a5a9f8e7137d0b5909cd31550348b55c5be3edade80ef020000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/48], @ANYBLOB='\x00'/66], 0x3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) socket$inet6(0xa, 0x400000000001, 0x0) ftruncate(0xffffffffffffffff, 0x0) r9 = geteuid() setreuid(r9, 0x0) add_key$user(&(0x7f0000000400)='user\x00', 0x0, &(0x7f0000000740), 0x0, 0xfffffffffffffffb) getgid() sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x3}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x80000001}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:23:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) eventfd2(0x0, 0x80000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000540)={0x0, 0x7, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000600)) r8 = syz_open_pts(r7, 0x0) read(r8, &(0x7f0000000080)=""/11, 0xb) fstat(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r10, 0x200004) sendfile(r5, r10, 0x0, 0x8000fffffffe) r11 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) r12 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r10, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf25ff020000000000000000000000000001", @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRES16=r12, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000300010000000000"], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'\x00\b\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) 01:23:48 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) gettid() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x2b}, 0x2c) syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000600)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x200, @loopback}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xfffffffffffffebd) fchdir(0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0)='F', 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x80000000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc00c000}, 0x20040004) keyctl$get_keyring_id(0x0, r4, 0x344) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r4, 0x17, 0x50}, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)="9d01fe1b870b61da2897dc812087e1ae5cc2d720c512d0", &(0x7f00000003c0)=""/80) r7 = socket(0x655115db654b1cf1, 0xa, 0x20) sendmsg$unix(r7, &(0x7f0000000340)={&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e22}, 0x2ed, &(0x7f0000000180)=[{0x0, 0xfffffffffffffe89}, {0x0, 0x270}], 0x2}, 0x24e1) [ 718.680759] binder: 20194:20205 ioctl 40046207 0 returned -13 [ 718.965330] binder: 20194:20208 ioctl 40046207 0 returned -13 01:23:51 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x40046fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003e00)='/dev/bsg\x00', 0x60680, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0xbc000000, @dev={0xfe, 0x80, [], 0xc}, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$smack_current(r5, &(0x7f0000000000)={'/dev/bsg\x00'}, 0xa) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) eventfd2(0x0, 0x80000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000540)={0x0, 0x7, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000600)) r8 = syz_open_pts(r7, 0x0) read(r8, &(0x7f0000000080)=""/11, 0xb) fstat(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r10, 0x200004) sendfile(r5, r10, 0x0, 0x8000fffffffe) r11 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) r12 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r10, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf25ff020000000000000000000000000001", @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRES16=r12, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000300010000000000"], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'\x00\b\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) 01:23:51 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:51 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000001c0)=0x800a74, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000440)=0xc) ptrace$setopts(0xffffffffffffffff, r5, 0xfb, 0x5d) r6 = getpgid(0x0) unshare(0x4040000000) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) r8 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x8000, &(0x7f0000000140)={0xa, 0x45, 0x0, @mcast1}, 0x1c) r9 = fcntl$dupfd(r8, 0x0, r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000200)={0x200, 0x0, 0x0, [{}, {{}, {0x0, 0x0, 0x13, 0x0, 'user+selfppp1em1\\}]'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}}, {0x0, 0x0, 0xd, 0x0, 'md5summd5sum-'}}]}, 0x200) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000840)=""/82) signalfd(r7, &(0x7f0000000000)={0x8001}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) rt_tgsigqueueinfo(r6, r12, 0x25, &(0x7f00000003c0)={0x2d, 0x43, 0x9}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000740)={'filter\x00', 0x0, 0x4, 0xb6, [], 0x0, 0x0, &(0x7f00000005c0)=""/182}, &(0x7f0000000040)=0x78) 01:23:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1000, 0x0) accept4(r1, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="130000004300250069000007a2e407edab1d05", 0x13}], 0x1) 01:23:51 executing program 0: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0xa4, @local, 0x4e24, 0x3, 'dh\x00', 0x18, 0x3, 0x5a}, {@empty, 0x4e20, 0x2000, 0x10000, 0x8, 0x8}}, 0x44) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10004812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340)="97ade78c", 0x4}]) dup3(r3, r4, 0x0) ioctl$sock_ifreq(r3, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:23:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="1cfa5946b751bd7063587fe469dfedae108e540b0d699fb780d12dec26f6df719f9c54920abb15916f185bd53a1842e6261ebbf0a87cd683d25a4f4e91a352b068ee07b11b58e09da709fe2c80705047b7a532589b5f423dd77bd7246bc79ee495352d14028e0f8ed4b29ebaf1447d7fa37caec4e5a4f958664b3c304669900496b588b200ad6819723681b7cd8747db5f3c5e90b1982cd7", 0x98) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000240), 0x4) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000001c0)) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000002c0)=""/100) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r4, 0x0, &(0x7f0000000000)=""/3) ptrace$setopts(0x4206, r4, 0x0, 0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000001c0)) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r7, 0x0, &(0x7f0000000000)=""/3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xf) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r14 = dup(r8) sendmmsg$unix(r14, &(0x7f0000003f40), 0x1, 0x0) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000500)={r7, r11, r13}, 0xc) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 721.546287] audit_printk_skb: 21 callbacks suppressed 01:23:51 executing program 3: socket$inet6(0xa, 0x20000000080002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() eventfd2(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34660f05"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xa) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 721.587371] audit: type=1400 audit(1575422631.303:895): avc: denied { create } for pid=20246 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 721.600142] audit: type=1400 audit(1575422631.253:894): avc: denied { create } for pid=20221 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 721.620007] audit: type=1400 audit(1575422631.333:896): avc: denied { set_context_mgr } for pid=20221 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 721.620049] binder: 20221:20247 ioctl 40046207 0 returned -13 [ 721.626480] binder: 20221:20247 Acquire 1 refcount change on invalid ref 0 ret -22 [ 721.626492] binder: 20221:20247 transaction failed 29189/-22, size 402653184--7885431403142184960 line 3014 [ 721.636032] audit: type=1400 audit(1575422631.333:897): avc: denied { create } for pid=20221 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) lseek(r1, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa5cc554) 01:23:51 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000147) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) select(0x40, &(0x7f0000000040)={0x1f, 0x6, 0x0, 0x0, 0x9265, 0x3f, 0x0, 0x7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x3f, 0x8001, 0x9}, 0xfffffffffffffffd, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='comm\x00') pselect6(0x19c, &(0x7f00000001c0)={0xfffffffffffffffc, 0x3, 0x5, 0x5, 0x8, 0x100000000, 0x10001, 0x401}, &(0x7f00000002c0)={0x3, 0x3, 0x5, 0x40000000, 0x0, 0x2, 0x0, 0x6}, &(0x7f0000000300)={0x0, 0x2004, 0x7fff, 0x0, 0x1, 0x40, 0xc03e, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={0x6740}, 0x8}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') pread64(r4, &(0x7f00000006c0)=""/4096, 0x1000, 0x6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xfe) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', '.cgroupmime_type[ppp0%\xe3\x00'}, &(0x7f0000000240)=""/19, 0x13) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000680)={0x0, 0x0, 0x10000, 0x8001}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) r5 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x1) inotify_rm_watch(0xffffffffffffffff, r5) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) [ 721.960845] binder: undelivered TRANSACTION_ERROR: 29189 01:23:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x7, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)) write$ppp(r1, &(0x7f0000000280)="9818ca5ed7489b55d132214b7f673cddc37bd3e20e8ffd53da7e9fc16a5207d3b679e55d9a961851af", 0x29) rt_sigtimedwait(&(0x7f0000000180)={0x80000000}, &(0x7f00000001c0), &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x233) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001780)='/selinux/load\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) sendfile(r4, r5, 0x0, 0x9) write$selinux_load(r4, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f030002000000"}, 0xff) 01:23:51 executing program 1: socket$unix(0x1, 0x2, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x510000) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000340)=0xc) fchdir(r4) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000440)) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setparam(r7, &(0x7f0000000140)) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x11) fcntl$setstatus(r8, 0x4, 0x6100) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000500)}], 0x1) set_tid_address(&(0x7f0000000040)) write$FUSE_INIT(r6, &(0x7f0000000180)={0x12, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0x10001}}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x11afea34) socket(0x0, 0x0, 0x0) r9 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0) mkdirat(r9, &(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 01:23:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80004, 0xf7) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000002900c035697fcebd000039ff070000000207000000002838544dda6f6a031f8a72e44c4c6bd1acd9e47b476be9bd24bf47aca47f4fccb01957f0a8c9d2d5e0d374c7bf7f797489e4c8b74f0450865d4316bc943eca244d0b6b7176cbf3c6a4766f14ca77d44a5dc33ff5e6fdbbd7e4846e7563a1ff75b907a02ed426169cf628eef98f0580e9c8174185a1f7c0ab91d03fe1a21ce90370846c6ad200056a1e426526d1646aa53893c9e416e5a965fe898276a9f1fa6e0300851fec10a01ffb8d8784f485ca686af60cee8f8b3e2c4468c67c735644f889fa3c8834a7e59684eac40c352f11f68e2b0000000000000000"], 0x18}}], 0x2, 0x0) 01:23:51 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x5c263e8e7f4f673d) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) 01:23:51 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:52 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 722.514067] audit: type=1400 audit(1575422632.223:898): avc: denied { create } for pid=20297 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 722.642903] audit: type=1400 audit(1575422632.353:899): avc: denied { create } for pid=20310 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:52 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:52 executing program 0: r0 = socket(0x10, 0x400000000080803, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x8010) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d020b49ff70880000800328000802010001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1d3af248f30f201580916039733a4ed5eec29375aa0b76956f20400f43c8bca382304c26e0c734a80037b8576edd3771bf9270d618e055e350f9335a4267a9cdf7af3360d7a275f0a0cf9583666762c5a3e26c882e3a62718dab54d5f49ecdeeb733639afc30ea08bf1809c891d82e3be1c005ae4b05cd0f3392414c56b5b1353a7cc0fc10137d179c7f5c275d4fa8d4e57ebc37f146da742e5d996a323592740bae9e1abe46f3fac8808afee66104a5b018cb62f4cee739dd08353fec0ec3653efe20460a94dd73c3dda98885ff58f57ac1eadbe74ff538ca5d38bdffb9", 0xde}, {}], 0x2) [ 723.318241] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.0'. [ 723.356964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4083 sclass=netlink_route_socket [ 723.400037] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.0'. [ 723.411514] audit: type=1400 audit(1575422633.123:900): avc: denied { create } for pid=20335 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) r5 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000820}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1e, 0x6e57d942, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48055}, 0x40000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1004400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x400}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x10) tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 724.546337] audit: type=1400 audit(1575422634.253:901): avc: denied { create } for pid=20348 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:54 executing program 3: socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x200) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfe53, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9f477ef3dc3519b0c27cb48c8a8b06d35eb0f32b2ee0097b47ff35c473ec8a2b0d48665513d3835bcca1a1556bf92ce83a181dba1732af393c23ff6de25c57c837bf9d10498a9f76ec416020982aed381fbc00377aa2d228b937b1a518df363e25ec723010858afd5dc749f6812495ab6231fd354c13640db43806edee765c4729d3346255d387025d03e62733333b1287cb7c02514c6ec3d4761daea5f7aa0ea169627efb63adfabd0d4b5c43044d150b71d95e9a6af9bbd839b57f21bee580fc3bebeaf8490da30f03a590be7e07c78601a2f6a64d3b1378048c1e7c9366e1c2294d0143b2fa6453f500"/249, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x3}}, 0x0) r3 = dup3(r2, r0, 0x80000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x8000, 0x7, 0x7ff, 0x2}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8010000) 01:23:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RSTATu(r1, &(0x7f0000000040)=ANY=[], 0x445144e9) sync_file_range(r1, 0x7fff, 0x0, 0x6) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffff9}) 01:23:54 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x13) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000200)={0x8, 0x6, [0x1, 0xf19c, 0x8, 0x9, 0x100], 0x6}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = eventfd2(0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0)='security.capability\x00', 0x0, 0x0, 0x1) fstat(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r2) r9 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r9, 0x28007d) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8}) 01:23:54 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:54 executing program 1: setrlimit(0x9, &(0x7f0000000000)) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/90) [ 724.623699] audit: type=1400 audit(1575422634.333:902): avc: denied { create } for pid=20344 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 724.663245] audit: type=1400 audit(1575422634.373:903): avc: denied { create } for pid=20353 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0xffff}, {@in=@multicast1, 0x0, 0x33}, @in=@broadcast, {}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x91}, [@replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x158}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000440)=0xfffffe46) ioprio_set$uid(0x3, r7, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r9, 0x0) r10 = getegid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000004c0)={0x8, &(0x7f0000000200)=[{0x8000, 0x40, 0x81, 0xb7}, {0x8, 0x47, 0x50, 0x5}, {0x110, 0x2, 0x81, 0x9}, {0xc0, 0x80, 0x0, 0x5548ae9a}, {0x8, 0x7, 0x5, 0xfffffff9}, {0x7, 0x6, 0x0, 0x3}, {0x80, 0x6, 0x81, 0x2}, {0xffe0, 0x2, 0x9b, 0x5}]}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r13}}}], 0x20}], 0x1, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r15}}}], 0x20}], 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="020000000100c4f00000000002000000", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="0400153a0000000008000800", @ANYRES32=r10, @ANYBLOB="0800020098b3957dd1fefe11b8281ab9a7e0a766d03cccd35be1b692817771bafbf96b67b5ed19793777903549b368db", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="100005000000000020110000d45e9f885c2515489cc028b15e2ebf9909ea0df228159669c1a5a9451dfc49afd8d09738e1b9c09728854b117eda85ee3ed68a480f9f49c784b7c6a9d8704de1d347"], 0x64, 0x2) r16 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) setsockopt$inet6_int(r16, 0x29, 0x297bf6f5d03af19e, &(0x7f0000000080)=0x4, 0x4) 01:23:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)="e33c14c47f112280bf6fe0f71727b9c5eb223d9861", 0x15, r3}, 0x68) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$KDDISABIO(r1, 0x4b37) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000140)=0x6) ioctl$KDDISABIO(r4, 0x4b37) socket$inet(0x10, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8200) ftruncate(0xffffffffffffffff, 0x81ff) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setitimer(0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r7, r0) 01:23:54 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x13) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000200)={0x8, 0x6, [0x1, 0xf19c, 0x8, 0x9, 0x100], 0x6}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = eventfd2(0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0)='security.capability\x00', 0x0, 0x0, 0x1) fstat(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r2) r9 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r9, 0x28007d) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8}) [ 725.091935] binder: BINDER_SET_CONTEXT_MGR already set [ 725.112154] binder: 20376:20382 ioctl 40046207 0 returned -16 01:23:55 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:55 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) socket(0x1, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c476828c7e4f1cd80"], 0x9}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) tkill(r0, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:23:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001200)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r4}, 0x14) r5 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)="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", 0x1000, r5}, 0x68) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) keyctl$clear(0x7, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ftruncate(r3, 0x80003) sendfile(r0, r3, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) [ 725.822185] binder: BINDER_SET_CONTEXT_MGR already set [ 725.839545] binder: 20410:20415 ioctl 40046207 0 returned -16 [ 726.562021] binder: BINDER_SET_CONTEXT_MGR already set [ 726.567525] binder: 20410:20418 ioctl 40046207 0 returned -16 01:23:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchmod(r1, 0x100) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0xffff}, {@in=@multicast1, 0x0, 0x33}, @in=@broadcast, {}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x91}, [@replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x158}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000440)=0xfffffe46) ioprio_set$uid(0x3, r7, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r9, 0x0) r10 = getegid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000004c0)={0x8, &(0x7f0000000200)=[{0x8000, 0x40, 0x81, 0xb7}, {0x8, 0x47, 0x50, 0x5}, {0x110, 0x2, 0x81, 0x9}, {0xc0, 0x80, 0x0, 0x5548ae9a}, {0x8, 0x7, 0x5, 0xfffffff9}, {0x7, 0x6, 0x0, 0x3}, {0x80, 0x6, 0x81, 0x2}, {0xffe0, 0x2, 0x9b, 0x5}]}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r13}}}], 0x20}], 0x1, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r15}}}], 0x20}], 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="020000000100c4f00000000002000000", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="0400153a0000000008000800", @ANYRES32=r10, @ANYBLOB="0800020098b3957dd1fefe11b8281ab9a7e0a766d03cccd35be1b692817771bafbf96b67b5ed19793777903549b368db", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="100005000000000020110000d45e9f885c2515489cc028b15e2ebf9909ea0df228159669c1a5a9451dfc49afd8d09738e1b9c09728854b117eda85ee3ed68a480f9f49c784b7c6a9d8704de1d347"], 0x64, 0x2) r16 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) setsockopt$inet6_int(r16, 0x29, 0x297bf6f5d03af19e, &(0x7f0000000080)=0x4, 0x4) 01:23:57 executing program 3: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = gettid() mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x800141f, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20080, 0x0) r6 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x400) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) fcntl$getflags(r7, 0x40a) tkill(r3, 0x13) close(r4) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0x78, 0x0, 0x7, {0xffffffffffffffff, 0x5, 0x0, {0x5, 0x8001, 0x4, 0x3, 0x0, 0x0, 0x83b4, 0x7, 0x2, 0x1f63, 0x1000, r8, 0xee00, 0x9, 0xba}}}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = accept4$unix(r10, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000000380)) 01:23:57 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001200)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r4}, 0x14) r5 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)="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", 0x1000, r5}, 0x68) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) keyctl$clear(0x7, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ftruncate(r3, 0x80003) sendfile(r0, r3, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) [ 727.524866] audit_printk_skb: 39 callbacks suppressed [ 727.552928] audit: type=1400 audit(1575422637.233:917): avc: denied { create } for pid=20424 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 727.589269] audit: type=1326 audit(1575422637.303:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=20424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0 01:23:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) prctl$PR_SET_PDEATHSIG(0x1, 0x13) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, 0x0) read(r0, &(0x7f0000000740)=""/236, 0xec) mknodat(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0xa100, 0x401) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = getpgid(0xffffffffffffffff) pipe(0x0) getgroups(0x3, &(0x7f0000000680)=[0x0, 0xee01, 0xffffffffffffffff]) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000006c0)={r4, 0x0, r5}, 0xc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0xffffffff, @ipv4={[], [], @loopback}}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, &(0x7f0000000180), r3, &(0x7f0000000380)=0x800, 0x5, 0x51320729f15c29ff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000300)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140), &(0x7f0000000540)=0xfffffffffffffe1f) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast1, @multicast2}, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, 0xfffffffffffffffe) r8 = dup2(r6, r7) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="44020000", @ANYRES16=0x0, @ANYBLOB="000026bd7000fcdbdf250f000000a40001002c0004001400010002004e22ffffffff0000d16c000000001400020002004e20ac1414bf000000000000000024000200080004000800000008000400ff010000080001001d00000008000100200000002c00020008000200de00000008000300d00e000008000300ffffffff080004000700000008000400ba0a000008000300a50000000800030099b000001400020008000400ff0100000800020006000000500004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f616463090000000000000000000c00010073797a30000000000c00070008000400040000002400020008000200600000000800020006000000080002000000002604000400040004001801010008000300080000001800010069623a76657468315f746f5f626f6e640000000008000300090000003c0002000800040001000000080004000700000008000300001c0000000800030008000000080002000708000000000000000000001400010069623a76657468305f746f5f687372002c00020008000400ed00000008000400070000000800030003000000080001001700000008000200020000002c0004001400010002004e22ac1414aa00000000000000001400020002004e24ac1414bb000000000000000008000300ff31000034000200080001001000000008000400060000000800020081000000080002a9db00000800010020000000080002000200000038e075acad8f46abbd04a02053aa26204cbab42fa9d280d64a77bde9caaf030711abba8a3eb33e71a6ebb252e26d32ef5d21e950c298d7a8dd8ae79da4c8e24aa8c6a4"], 0x244}, 0x1, 0x0, 0x0, 0x80}, 0x44) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000003c0)=0xc5) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 727.596191] audit: type=1400 audit(1575422637.303:919): avc: denied { create } for pid=20423 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 727.605148] audit: type=1400 audit(1575422637.313:920): avc: denied { create } for pid=20423 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 727.624958] binder: BINDER_SET_CONTEXT_MGR already set [ 727.624968] binder: 20423:20433 ioctl 40046207 0 returned -16 [ 727.745515] audit: type=1400 audit(1575422637.453:921): avc: denied { create } for pid=20441 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:23:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000001c0)) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r4, 0x0, &(0x7f0000000000)=""/3) ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000000000)={&(0x7f00000002c0)=""/251, 0xfb}) 01:23:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1000}, @window={0x3, 0x7, 0x5}, @window={0x3, 0xfe, 0x2}, @sack_perm], 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x101000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa932905d04184ddf}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="00002abd7000fddbdf250400000054010500080001007564700008000100756470008ef2c7446f5de81c0800010065746800080001006574680008000100696200000c000200080004e5ff0300001400020008000400060000000800020009000000080001000862000047000600040002000400020008000100000000800800010001000000080001000300000004000200240009000800010003000000080002000000000008000200010000000800020007000000"], 0xb4}}, 0x40) connect$inet6(r0, &(0x7f0000000080), 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r6, 0x0, 0x10) tkill(r6, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) dup3(r3, r5, 0x0) 01:23:58 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 728.378186] audit: type=1400 audit(1575422638.093:922): avc: denied { create } for pid=20461 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1000}, @window={0x3, 0x7, 0x5}, @window={0x3, 0xfe, 0x2}, @sack_perm], 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x101000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa932905d04184ddf}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="00002abd7000fddbdf250400000054010500080001007564700008000100756470008ef2c7446f5de81c0800010065746800080001006574680008000100696200000c000200080004e5ff0300001400020008000400060000000800020009000000080001000862000047000600040002000400020008000100000000800800010001000000080001000300000004000200240009000800010003000000080002000000000008000200010000000800020007000000"], 0xb4}}, 0x40) connect$inet6(r0, &(0x7f0000000080), 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r6, 0x0, 0x10) tkill(r6, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r3, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x383be42370805ab5, &(0x7f0000000040)=0x100, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, 0x0, 0x0, 0xf3c3aa259e3c6d34, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0x3, 0xffff7fff, 0x34, &(0x7f00000000c0)="f74fdb57a42f60b593e636859b745ffc8f1f91666b09db5bb1c91ebade03036362bed26bdf23db5b68c52c78e72ff6d4a4c1f801"}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000080)=0x2) sendmmsg(r2, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 01:23:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0xfffffffffffffe3d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2, 0x1}, {0x5, 0x2, 0x40, 0x3d58}, {0x8, 0x7, 0xa, 0x5}, {0x101, 0x81, 0x20, 0x8e}, {0x8000, 0xba, 0x40, 0xa35}]}) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4200, r3, 0x66, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 728.629387] audit: type=1400 audit(1575422638.343:923): avc: denied { create } for pid=20475 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 728.686033] audit: type=1400 audit(1575422638.393:924): avc: denied { create } for pid=20482 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 01:23:58 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, &(0x7f0000000240)) pipe(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0xcc, 0xf2e, 0x50}, 0xc) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)]) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="00d3bb0f00000014660f34ea"], 0xc}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40020000000c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = dup(r2) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1, r5}]) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x2, 0x0) 01:23:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept(r1, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x80) pipe(&(0x7f0000000200)) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000100)="8a7301de37cdd1a7f170bb19b6c77850f1299432e6a60abdb601e07bb23e05f2efc1fe634ffc67ab234edf61bc60a93801045f1266d072adf0f0e6efd1", 0x3d) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) 01:23:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fgetxattr(r3, &(0x7f0000000000)=@random={'system.', 'vboxnet0trusted-system:x+@}*\x00'}, &(0x7f00000000c0)=""/133, 0x85) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 728.841881] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 728.895376] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 01:23:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000140)="966bf507f60e580f6e3419c6c6d670dc8a86cca32d0000000000000000d7033b926eb9278694c542bb6cfbcca3de591a7403c3c7293da3", 0x1000005e5) read(r2, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setstatus(r1, 0x4, 0x6100) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TCSETXW(r4, 0x5435, &(0x7f00000001c0)={0x20, 0x6, [0x81, 0x8, 0xfffb, 0x2, 0x7ff], 0x1}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 01:23:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40008040}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000100)=""/148) write$evdev(0xffffffffffffffff, &(0x7f0000000300)=[{{}, 0x15}], 0x18) r5 = getpgrp(0xffffffffffffffff) prlimit64(r5, 0x6, &(0x7f0000000080)={0x24}, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) socket$inet6(0xa, 0x1, 0x7f) 01:23:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x840000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:59 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:23:59 executing program 1: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet(0x10, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0x3992dac9fef5b222) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000000eb40)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f000000ec40)=[{&(0x7f000000ebc0)="a1c6e8f331d9c047d51158fb67e571238ba8ae5082749f933f79bba1bf9036685003acafbbfd6de1e1c03f5e835d90b7af0e0d857261f17b3346bb76de428044749687a5de", 0x45}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="4000000000000000ea00f9ffff020000857eab923541a97c95c7248932c98917ab101bd76b5800aa2baec82edd84f4a86a3ea51a39ac7999811f000000000000a800000000000000ede2230e43000000d9da910b578e8631db49d0413a2758a4baec768a22bd598e2294a6268ba556c77508c2c9d796e217c67c7902e315dd7e0ddd817bfe95000000000000000828669259989f58518de040dfb74244066f01c2318602fd150a49d56f843efc4d808a1b4f2692a1d95e7b911611f368bc03f98b023139af266724f24ba67bb84a4e25d96326939e6ca134f9944709a10a3683707ff8a404a69a932757010047fee70e9fe42ac5dd99be54404d5bd853c342ad6f692144052f103915e0e8dbba04ecf7e1c57722d93c1a828e71901f1195fbc627f13a5ea54e19dc28fb2308640dc8a480b61af9d0409a8913d2f32bbd8d06b2e8c0eb60e4571c9a9c8513efdb8059d0ed5ec6d0ba64dae35bd21334552a05690e1c387ea948393d013b3f7a56efe71d000000000000000000"], 0xe8}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, 0x0, 0x8000fffffffe) [ 729.448072] input: syz1 as /devices/virtual/input/input51 [ 729.568729] audit: type=1400 audit(1575422639.283:925): avc: denied { create } for pid=20523 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 729.628890] input: syz1 as /devices/virtual/input/input52 01:23:59 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x430701, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgs\x03\x00p.net\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r1, 0xfffffffffffffec3, 0xfffffffffffffebd}, &(0x7f0000000380)=ANY=[], 0x0, 0x0) gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffd64) ioctl(r5, 0x0, &(0x7f0000000340)="ab58b876e7f2d826a351f1c5e8df51f3d588c8cd745497") r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r7, 0x8200) r8 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) ftruncate(r9, 0x363e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(r12, 0x2, 0xffffffffffffffff) ftruncate(r7, 0x81ff) 01:23:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x8}, @timestamp, @timestamp, @timestamp], 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000040)=0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:23:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x8001}, 0x10) r1 = socket(0x1, 0x6, 0x9a) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000003c0)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454da, 0x400006) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'yam\x00\x00\x10\x00', 0x2}) 01:23:59 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 730.488587] audit: type=1400 audit(1575422640.203:926): avc: denied { create } for pid=20586 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:24:01 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, &(0x7f0000000240)) pipe(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0xcc, 0xf2e, 0x50}, 0xc) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)]) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="00d3bb0f00000014660f34ea"], 0xc}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40020000000c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = dup(r2) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1, r5}]) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x2, 0x0) 01:24:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000140)="966bf507f60e580f6e3419c6c6d670dc8a86cca32d0000000000000000d7033b926eb9278694c542bb6cfbcca3de591a7403c3c7293da3", 0x1000005e5) read(r2, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setstatus(r1, 0x4, 0x6100) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TCSETXW(r4, 0x5435, &(0x7f00000001c0)={0x20, 0x6, [0x81, 0x8, 0xfffb, 0x2, 0x7ff], 0x1}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 01:24:01 executing program 1: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000340)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r4, &(0x7f0000002f00)=[{{0x0, 0x1fb, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=[@txtime={{0xffffffffffffff22, 0x1, 0x25}}], 0x18}}], 0x2, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000004f37f234a420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c0000000000000018000000000500000000000000096ee9f900000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) sendfile(r5, r7, 0x0, 0x8) fcntl$lock(r3, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r8 = socket$inet6(0xa, 0x400000000001, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x102, 0x0) sendfile(r10, r9, 0x0, 0x40000000009) read$FUSE(r9, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe7) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000400)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, 0x0, 0x0) r11 = dup(r8) r12 = socket$inet6(0xa, 0x4, 0x0) close(r12) r13 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r12, r13, 0x0, 0x8000fffffffe) setsockopt$inet6_tcp_int(r13, 0x6, 0x9, &(0x7f00000005c0)=0xfc, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x418}}, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r15 = open(&(0x7f0000000240)='./file0\x00', 0x141042, 0x0) ftruncate(r15, 0x2007fff) sendfile(r11, r15, 0x0, 0x8000fffffffe) 01:24:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VT_WAITACTIVE(r5, 0x5607) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000000c0)=""/187) 01:24:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x8001}, 0x10) r1 = socket(0x1, 0x6, 0x9a) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000003c0)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454da, 0x400006) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'yam\x00\x00\x10\x00', 0x2}) 01:24:01 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:24:01 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\x98\x00') r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev, @in6}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000180)=0xe8) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x3c}, {0x80000006}]}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x400000000003}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) 01:24:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_subtree(r7, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000100)) r9 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r10 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x21, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pause() connect$inet6(r0, &(0x7f0000000080), 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000004, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() ioctl$TIOCGPTPEER(r5, 0x5441, 0x4aea) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000300)=ANY=[@ANYBLOB]) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LSEEK(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x6, {0x1}}, 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) open(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@v1={0x1000000, [{0x1, 0xe9}]}, 0xc, 0x0) 01:24:02 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) [ 732.847850] audit_printk_skb: 3 callbacks suppressed [ 732.853035] audit: type=1400 audit(1575422642.563:928): avc: denied { create } for pid=20650 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:24:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) recvmsg(r0, &(0x7f00000162c0)={0x0, 0x0, 0x0}, 0x20141) 01:24:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @remote, 0xfffffffc}, 0xffffffffffffff64) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) dup3(r0, r2, 0x0) dup2(r0, r3) 01:24:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffffffffffebe) lseek(r1, 0x0, 0x3) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) flock(r2, 0x4) 01:24:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 01:24:04 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:24:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r4 = fcntl$getown(r3, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='projid_map\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r5, 0x0, 0x0) getpgid(0xffffffffffffffff) tkill(r5, 0x8026) wait4(0x0, 0x0, 0x0, 0x0) 01:24:04 executing program 0: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) epoll_create(0x7) dup(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c2b436809c76e6bedb43f0458aae568f8fc00f6a1000300"/38], 0xa}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x60600084}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$cont(0x7, r2, 0x0, 0x0) 01:24:04 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x88000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001300)='f\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp<\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xd3\n\x96\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x1f=\b\xa3\xcf\xe6\x9f\xa4\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000000)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0) [ 734.962858] audit: type=1400 audit(1575422644.673:929): avc: denied { create } for pid=20697 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 735.003228] audit: type=1400 audit(1575422644.713:930): avc: denied { create } for pid=20671 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:24:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) pipe(0x0) r5 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) write(r5, &(0x7f0000000900)="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", 0xfe49) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0)='security.capability\x00', 0x0, 0x0, 0x1) fstat(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x20000, 0x3d827f97add7aed8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) r10 = socket(0x100000000011, 0x2, 0x0) bind(r10, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b08160df7db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000100)={r11, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000200)={@loopback, @remote, @local, 0x10001, 0x5, 0x7fff, 0x500, 0x1, 0x7810060, r11}) r14 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r14}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$TIOCGETD(r16, 0x5424, &(0x7f0000000140)) 01:24:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RREAD(r2, &(0x7f00000000c0)={0xc1, 0x75, 0x1, {0xb6, "9c146d99461cb222d6c5bf8b5bf1e9e7e24050efecfbeb780a54413e86d711b99765d3c811e2bf4e817a81e686d0e620f1bbc194f92e7d87f7c85a8da4191b070c1f8b7ebb8b4a7e37a5e44e4e2ce9eded6f3683da6b018eb7ef6152b668b7705522613e43d62d1f0ad2868e32701eeec79e66a1820f341ccbf4d464d8f132180246abf8fcf254b06d8c84660a89525d85c69a0b20514399cac039df918bff65415f51cdb0c2b0c4a2560aab2325c952fc537f5548ca"}}, 0xc1) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 735.270756] binder: BINDER_SET_CONTEXT_MGR already set 01:24:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 01:24:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xdffffffffffffffc) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x8000001) mlockall(0xf) [ 735.307628] binder: 20707:20714 ioctl 40046207 0 returned -16 01:24:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000180), 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 01:24:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xdffffffffffffffc) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x8000001) mlockall(0xf) 01:24:05 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:24:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{}, {r0}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='exfat\x00\xdd\x05\x13>\x95\x82\xbcP\x81X\xb3\xf0\xbd\v\xb9', 0x800000, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x209020, 0x0) 01:24:05 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) getpid() write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYRES16], 0xfffffffffffffe67) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000001) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) 01:24:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x3ff, 0x0, "44be448b5ffcff5b1db27a7e61f78378ddec696d39bf18b60658036d6e80ffc3337cee2d4ef7663682c5596349ae74ffd92ee5517f8ac797babd03dfe95a3dc617ba0705e83162702640e971ab49e3e3"}, 0xd8) dup3(r0, r1, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)='\x00') tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 736.003930] audit: type=1400 audit(1575422645.713:931): avc: denied { create } for pid=20743 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:24:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x12, 0x7ff}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 01:24:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x7, &(0x7f00000002c0)="57ad44afbc2f399b8fe5935c00cd50c03b7bd578947e1f6e309f1788803d5e77412f719b808da175adfa1e2f0100c14f308efc8eba1a1dd8cfa12311744bbbaee9a7be219afc955df605bfdafdeb093d86c8e348452e9961e19595a0c85b741415f64dc3bd2d133e111d9f50aed03324034eb7397726db6d1fa369f3b7eaa0eae9dcfea1f6ab7a029a109d11b5c1783c76f1beeda2acdc0cfff03c04332b2fa605f400908866c6392e46ea5a2a760580045c256c6097791e018495888dac3639cfe1fd4085df9cd0ea40da898acb71dc2d8d3c26d522e94aae1bbf836a7e6ec366cfd52460c3d98fbeafa18590a8") r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(r6, &(0x7f00000001c0)="230494740676e88f331346d62eb04ca2aeb7f2b947ee17c6ed12ea8442b72d54b93fa403cd175546d0aca18c0fd1332becc1d31b2fa8b2e4ba60e1c8c51e152748e23dc8d871206b4a68154e197c1f1a65bdd4024bed6300835287aed1de2c355b96610676abc2d33ee6db569e8581d63a38c8b53a3ad74cc0025c6711db239f25a296082d91075841d39e5ec820678678c6d9c863608c74caffb8828dda65832bf6f75dfa584991c4be6b3e6bbdf033ab1a4695879c44a2c0da51e2", 0xbc, 0x24000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000000)={0x0, 0x3, 0x1}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x4) wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000140)) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) accept$unix(r9, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) [ 736.445456] audit: type=1400 audit(1575422646.153:932): avc: denied { set_context_mgr } for pid=20778 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 736.470881] binder: 20778:20779 ioctl 40046207 0 returned -13 01:24:07 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) dup(0xffffffffffffffff) socket(0x11, 0x0, 0xfe) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) dup(r0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r3 = dup(r2) socket(0x10, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) r4 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xc65, 0x8}) syz_open_procfs(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f00000000c0)='\x00', &(0x7f0000000140), 0x0, 0x1000) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffda, 0xcece7dff2b09d238, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0xfffffe38) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r5, &(0x7f0000007e00), 0x40000000000025d, 0x0) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) 01:24:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x1, 0x1f, 0x8, 0xff, 0x0, 0x6c4, 0x5ad0388f5b1e40e1, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffeffff, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x7, 0x5, 0x2, 0x2, 0x9, 0x1c}, 0x0, 0xd, r1, 0xa) r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) signalfd4(r6, &(0x7f0000000000)={0x8001}, 0x8, 0x80000) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f00000000c0)=0x3) r8 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) r4 = socket(0x200000000000011, 0x4000000000080002, 0xdd86) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet(r4, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="96c6322ea68406018000000000000040e4719016cbc15a36a88c6ca976843e12b1f5c20600000000", 0x28}], 0x1, 0x0, 0x0, 0x534}}], 0x10a, 0x0) 01:24:07 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r3 = getpgid(r2) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r4, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r4, &(0x7f0000000580), 0x25b) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r11 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r12 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r12) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r14 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r14, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) write$binfmt_elf32(r5, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) fcntl$setstatus(r12, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r17) pipe2$9p(&(0x7f0000000480), 0x4000) r18 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r18}) fstat(r18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r23, 0x200004) sendfile(r20, r23, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r23, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r22, r19, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r15, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r13, r14, 0x0, 0x180003) 01:24:07 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r1, 0x1c08) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="056304400000000011634840000000000000000000008f853b900000010000000000000104000000000000000000df1700000000000000ebea519192096ee9e100000000000600059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fcntl$notify(r4, 0x402, 0x0) write$FUSE_LK(r3, &(0x7f0000000040)={0x28}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8) [ 738.236193] audit: type=1400 audit(1575422647.943:933): avc: denied { set_context_mgr } for pid=20790 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 738.264090] binder: 20790:20792 ioctl 40046207 0 returned -13 [ 738.276098] audit: type=1400 audit(1575422647.983:934): avc: denied { set_context_mgr } for pid=20790 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 738.300635] binder: 20790:20792 ioctl 40046207 0 returned -13 [ 738.309155] binder: 20790:20792 ioctl 8912 400200 returned -22 [ 738.322057] binder: 20790:20792 Acquire 1 refcount change on invalid ref 0 ret -22 [ 738.344267] binder: 20790:20792 transaction failed 29189/-22, size 402653184--7885431403142184960 line 3014 [ 738.408213] audit: type=1400 audit(1575422648.123:935): avc: denied { create } for pid=20803 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:24:08 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r1, 0x1c08) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="056304400000000011634840000000000000000000008f853b900000010000000000000104000000000000000000df1700000000000000ebea519192096ee9e100000000000600059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fcntl$notify(r4, 0x402, 0x0) write$FUSE_LK(r3, &(0x7f0000000040)={0x28}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8) 01:24:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) lseek(r1, 0x8, 0x1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) fstat(r4, &(0x7f0000000680)) getpid() getgid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000000140)=0x2a9) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(0xffffffffffffffff) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r6}) [ 738.624585] audit: type=1400 audit(1575422648.333:936): avc: denied { set_context_mgr } for pid=20809 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 738.730998] binder: 20809:20809 ioctl 40046207 0 returned -13 01:24:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x8, 0x3ff}}, 0xe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/ipc\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmmsg(r0, &(0x7f0000008880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:24:08 executing program 3: timer_create(0x6, 0x0, &(0x7f0000000080)) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000240000000000000000000000000080aa7289817145646ea31fd1ccef00000000470162761d9d60de7da1e07e0c3638e0b5364fcf1db5098b2bc748aa00004d689a9739e4574c5a0ea5bd3b6c95099d54d099fba6dd90aec8bc01fa093e9ddfb8fae21fc41a1b2364bad2c21c"], 0x13) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) fchdir(r1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 01:24:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="c79fc9ed17"], 0xe) r2 = signalfd(r1, &(0x7f0000000080)={0x8}, 0x8) flock(r2, 0x8) close(r1) close(r0) r3 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000280)={0x1, 'ifb0\x00', {}, 0x9}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000180)={{0x2, 0x0, @descriptor="7820cebe6fd3fb22"}, 0xa9, [], "97a3f60d353953f25401748a0efff7549988237227016a8dc27493563ba4adccb618a60edc34c798fff833c3c4f585a22fd5e9c7c9846da7305c32426624d7b8fd91ce8ada53bed31c7c51c031c44f6e3d157dab787bbd1838b83ccecad72bc8d486389075a6549efee67f311d3b41d0774b8911d65b9ab9dd63e469ecf7542d92b48b9b1127f731c5b089d03a9a1e480e79edf1b0891fd2dde9774247f095c20dde8e1c21d74baacc"}) 01:24:08 executing program 4: r0 = eventfd2(0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r4, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:24:08 executing program 3: io_setup(0x20000000002, &(0x7f0000000240)=0x0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={{0x2, 0x0, @descriptor="0a20534139e1421e"}}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) io_submit(r0, 0x0, &(0x7f0000000080)) [ 739.172114] binder: BINDER_SET_CONTEXT_MGR already set [ 739.187779] binder: undelivered TRANSACTION_ERROR: 29189 [ 739.204546] binder: 20839:20840 ioctl 40046207 0 returned -16 [ 739.250540] audit: type=1400 audit(1575422648.963:937): avc: denied { set_context_mgr } for pid=20835 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 739.277931] binder: BINDER_SET_CONTEXT_MGR already set [ 739.293281] binder: 20839:20845 ioctl 40046207 0 returned -16 [ 739.312915] binder: 20835:20842 ioctl c0506617 20000180 returned -22 [ 739.380135] binder: 20835:20846 ioctl 40046207 0 returned -13 01:24:09 executing program 1: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000008) ioctl$TIOCNOTTY(r1, 0x5422) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'\x01\x00', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = getpgid(0xffffffffffffffff) ptrace$setsig(0x4203, r4, 0xf36, &(0x7f0000000300)={0x1d, 0x3, 0x5}) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_int(r5, 0x29, 0x3e, 0x0, 0x81) getpeername$inet6(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) write$FUSE_CREATE_OPEN(r9, &(0x7f00000004c0)={0xa0, 0xfffffffffffffff5, 0x7, {{0x1, 0x3, 0x4, 0x8, 0xc6f, 0x0, {0x5, 0xae7, 0x6, 0x7, 0x3ff, 0x56de220f, 0x0, 0x0, 0x80000001, 0x401, 0x40, r10, 0xee00, 0x800, 0xffff6e9d}}, {0x0, 0x3eaa3b151bc8a16d}}}, 0xa0) 01:24:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000120001000000deffffff0000e0000001000000000000000000000000000000000200000014000d00ac1414aa00"/60], 0x3c}, 0x8}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r8, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)=0x0) fchownat(r6, &(0x7f0000000000)='./file0\x00', r8, r9, 0x800) 01:24:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast1}, 0x0, r3}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$cgroup_ro(r6, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x261) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2003, 0x0) dup3(r1, r9, 0x0) close(r0) 01:24:09 executing program 3: io_setup(0x20000000002, &(0x7f0000000240)=0x0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={{0x2, 0x0, @descriptor="0a20534139e1421e"}}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) io_submit(r0, 0x0, &(0x7f0000000080)) [ 739.441770] binder: 20835:20846 ioctl 40046207 0 returned -13 [ 739.448534] binder: 20835:20861 ioctl c0506617 20000180 returned -22 [ 739.469755] binder: BINDER_SET_CONTEXT_MGR already set [ 739.475206] binder: 20864:20867 ioctl 40046207 0 returned -16 01:24:09 executing program 3: set_robust_list(&(0x7f0000000200)={&(0x7f0000000140), 0x6, &(0x7f00000001c0)={&(0x7f0000000180)}}, 0x18) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20100, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) mknod(&(0x7f0000000100)='./file0\x00', 0x1044, 0x0) alarm(0x5) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace(0x11, r0) [ 739.594832] [ 739.596509] ====================================================== [ 739.602825] [ INFO: possible circular locking dependency detected ] [ 739.609243] 4.4.174+ #4 Not tainted [ 739.612864] ------------------------------------------------------- [ 739.619268] syz-executor.3/20878 is trying to acquire lock: [ 739.624970] (&pipe->mutex/1){+.+.+.}, at: [] fifo_open+0x15d/0xa00 [ 739.633621] [ 739.633621] but task is already holding lock: [ 739.639855] (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 [ 739.649760] [ 739.649760] which lock already depends on the new lock. [ 739.649760] [ 739.658590] [ 739.658590] the existing dependency chain (in reverse order) is: [ 739.666196] -> #1 (&sig->cred_guard_mutex){+.+.+.}: [ 739.671994] [] lock_acquire+0x15e/0x450 [ 739.678266] [] mutex_lock_interruptible_nested+0xd2/0xce0 [ 739.686151] [] proc_pid_attr_write+0x1a8/0x2a0 [ 739.689699] binder: BINDER_SET_CONTEXT_MGR already set [ 739.689712] binder: 20862:20880 ioctl 40046207 0 returned -16 [ 739.704154] [] __vfs_write+0x116/0x3d0 [ 739.710345] [] __kernel_write+0x112/0x370 [ 739.716782] [] write_pipe_buf+0x15d/0x1f0 [ 739.723289] [] __splice_from_pipe+0x37e/0x7a0 [ 739.730088] [] splice_from_pipe+0x108/0x170 [ 739.736711] [] default_file_splice_write+0x3c/0x80 [ 739.743930] [] SyS_splice+0xd71/0x13a0 [ 739.750115] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 739.757339] -> #0 (&pipe->mutex/1){+.+.+.}: [ 739.762578] [] __lock_acquire+0x37d6/0x4f50 [ 739.769199] [] lock_acquire+0x15e/0x450 [ 739.775545] [] mutex_lock_nested+0xc1/0xb80 [ 739.782222] [] fifo_open+0x15d/0xa00 [ 739.788312] [] do_dentry_open+0x38f/0xbd0 [ 739.794816] [] vfs_open+0x10b/0x210 [ 739.800738] [] path_openat+0x136f/0x4470 [ 739.807109] [] do_filp_open+0x1a1/0x270 [ 739.813511] [] do_open_execat+0x10c/0x6e0 [ 739.819968] [] do_execveat_common.isra.0+0x6f6/0x1e90 [ 739.827540] [] SyS_execve+0x42/0x50 [ 739.833685] [] return_from_execve+0x0/0x23 [ 739.840240] [ 739.840240] other info that might help us debug this: [ 739.840240] [ 739.848381] Possible unsafe locking scenario: [ 739.848381] [ 739.854440] CPU0 CPU1 [ 739.859098] ---- ---- [ 739.863911] lock(&sig->cred_guard_mutex); [ 739.868487] lock(&pipe->mutex/1); [ 739.875002] lock(&sig->cred_guard_mutex); [ 739.882160] lock(&pipe->mutex/1); [ 739.886207] [ 739.886207] *** DEADLOCK *** [ 739.886207] [ 739.892253] 1 lock held by syz-executor.3/20878: [ 739.896999] #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 [ 739.907421] [ 739.907421] stack backtrace: [ 739.911915] CPU: 0 PID: 20878 Comm: syz-executor.3 Not tainted 4.4.174+ #4 [ 739.918954] 0000000000000000 5ce90cf8b69aa2c7 ffff8800b8857530 ffffffff81aad1a1 [ 739.927111] ffffffff84057a80 ffff8800b77e97c0 ffffffff83abd610 ffffffff83ab6860 [ 739.935207] ffffffff83abd610 ffff8800b8857580 ffffffff813abcda ffff8800b8857660 [ 739.943615] Call Trace: [ 739.946198] [] dump_stack+0xc1/0x120 [ 739.951553] [] print_circular_bug.cold+0x2f7/0x44e [ 739.958133] [] __lock_acquire+0x37d6/0x4f50 [ 739.964099] [] ? trace_hardirqs_on+0x10/0x10 [ 739.970146] [] ? do_filp_open+0x1a1/0x270 [ 739.975940] [] ? do_execveat_common.isra.0+0x6f6/0x1e90 [ 739.982950] [] ? SyS_execve+0x42/0x50 [ 739.988750] [] ? stub_execve+0x5/0x5 [ 739.994124] [] lock_acquire+0x15e/0x450 [ 739.999735] [] ? fifo_open+0x15d/0xa00 [ 740.005259] [] ? fifo_open+0x15d/0xa00 [ 740.010785] [] mutex_lock_nested+0xc1/0xb80 [ 740.016745] [] ? fifo_open+0x15d/0xa00 [ 740.022270] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 740.029014] [] ? mutex_trylock+0x500/0x500 [ 740.034899] [] ? fifo_open+0x24d/0xa00 [ 740.040453] [] ? fifo_open+0x28c/0xa00 [ 740.045987] [] fifo_open+0x15d/0xa00 [ 740.051347] [] do_dentry_open+0x38f/0xbd0 [ 740.057142] [] ? __inode_permission2+0x9e/0x250 [ 740.063458] [] ? pipe_release+0x250/0x250 [ 740.069268] [] vfs_open+0x10b/0x210 [ 740.074538] [] ? may_open.isra.0+0xe7/0x210 [ 740.080511] [] path_openat+0x136f/0x4470 [ 740.086279] [] ? depot_save_stack+0x1c3/0x5f0 [ 740.092430] [] ? may_open.isra.0+0x210/0x210 [ 740.098493] [] ? kmemdup+0x27/0x60 [ 740.103820] [] ? selinux_cred_prepare+0x43/0xa0 [ 740.110144] [] ? security_prepare_creds+0x83/0xc0 [ 740.116639] [] ? prepare_creds+0x228/0x2b0 [ 740.122530] [] ? prepare_exec_creds+0x12/0xf0 [ 740.128682] [] ? do_execveat_common.isra.0+0x2d6/0x1e90 [ 740.135694] [] ? stub_execve+0x5/0x5 [ 740.141065] [] ? kasan_kmalloc+0xb7/0xd0 [ 740.146835] [] ? kasan_slab_alloc+0xf/0x20 [ 740.152722] [] ? kmem_cache_alloc+0xdc/0x2c0 [ 740.158774] [] ? prepare_creds+0x28/0x2b0 [ 740.164566] [] ? prepare_exec_creds+0x12/0xf0 [ 740.170716] [] do_filp_open+0x1a1/0x270 [ 740.176327] [] ? save_stack_trace+0x26/0x50 [ 740.182358] [] ? user_path_mountpoint_at+0x50/0x50 [ 740.188941] [] ? SyS_execve+0x42/0x50 [ 740.194390] [] ? stub_execve+0x5/0x5 [ 740.199747] [] ? __lock_acquire+0xa4f/0x4f50 [ 740.205809] [] ? trace_hardirqs_on+0x10/0x10 [ 740.211986] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 740.218841] [] do_open_execat+0x10c/0x6e0 [ 740.224656] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 740.231642] [] ? setup_arg_pages+0x7b0/0x7b0 [ 740.237710] [] ? do_execveat_common.isra.0+0x6b8/0x1e90 [ 740.244750] [] do_execveat_common.isra.0+0x6f6/0x1e90 [ 740.251599] [] ? do_execveat_common.isra.0+0x422/0x1e90 [ 740.258840] [] ? __check_object_size+0x222/0x332 [ 740.265265] [] ? strncpy_from_user+0xd0/0x230 [ 740.271417] [] ? prepare_bprm_creds+0x120/0x120 [ 740.277845] [] ? getname_flags+0x232/0x550 [ 740.283730] [] ? SyS_clock_gettime+0x118/0x1e0 [ 740.290087] [] SyS_execve+0x42/0x50 01:24:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'eql\x00', {0x2, 0x4e23, @multicast1}}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000000)='ip_vti0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fff}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x2) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000140)={0x7fffffff, 0x0, 0x1}) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x4) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f00000000c0)) wait4(0x0, 0x0, 0x0, 0x0) 01:24:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="20b095f6d56d3fc86d5c52c1a900cf0f336baa5e200550f490267f08926a43d641af4663aa80a14be06700a9780473909a79b4bf7626ebaa9543ca311adba59900786386f7b96fdc38dd6c04ce8d2d5667a2d0ec9bafd4bd72f452b230c8ef732ab9642f651f4e6d980f67f43e219a398cbc4a7726dfe47067c4cb32a8b753872fcee6f2c1c247900046ff3f00d05889710d00000000325e449bb1b335ec9a17b21995240f137f136903dddbff20710e555743edd6c66f795bbee8d3d80bd7ad200b10105af9a5e25f68fad1503eed3a29f9c619cbf47d95e3574e72a648ba0142d45d481209d3"], &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) unshare(0x60020000) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80800, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000280)='stat\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4089, 0xff9}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fchownat(r4, &(0x7f0000000080)='./file1\x00', r5, r6, 0x1000) [ 740.295496] [] stub_execve+0x5/0x5 [ 740.300707] [] ? tracesys+0x88/0x8d 01:24:10 executing program 4: r0 = eventfd2(0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r4, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:24:10 executing program 1: prctl$PR_GET_THP_DISABLE(0x2a) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x41000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x80, 0x0, &(0x7f0000000800)=[@register_looper, @release={0x40046306, 0x1}, @free_buffer, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/190, 0xbe, 0x2, 0x18}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000007c0)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}], 0xfa, 0x0, &(0x7f0000000880)="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"}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000a00)={0x3, &(0x7f00000009c0)=[{0x5, 0x2, 0x4, 0x80}, {0xd4b9, 0x4, 0x0, 0x1}, {0x1, 0x4, 0x4, 0x80000001}]}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x250, 0x0, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x81, 0x3}}}, {{@arp={@local, @remote, 0xffffff00, 0xff, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0x0, 0xff, 0xff, 0x17e]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x82856165a297e85}, {[0x0, 0x80, 0xff, 0xff, 0x0, 0xff]}, 0x3, 0x401, 0x1, 0x5a, 0x1, 0x4, 'veth0_to_bridge\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x0, 0x2e0}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x6, 0x7fa993c2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="f093157d6160", @loopback, @dev={0xac, 0x14, 0x14, 0x18}, 0xd, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 01:24:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000700)={&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x17}, 0x8001}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000001c0)="08cdafff17007d92d6eed73b3dcae377022175678192a5b0c142d27350555da4d28cac184d088af445565615221b5ccbf7deb6626e448244fb3f1b1c26a2a3d27732d4392f0e8fe383417ec7cc34e94c7a2d9d48b26368d8cc5794daa81c7cee135e46f11047a232d2024b5bdf5db14ce5eefc1322980891071aed91c899c799121eea2ee8fbbc2889", 0x89}, {&(0x7f0000000280)="71601bb37e30086bcbcd397544b38af08c691dc32b4bc88ccbb6dc58b2dfe18c4d1161212bf586b1897e374cbbb830674f091ab02446f9762dc2635048c22c813116a9bc5c1cf38ce6615df0687e153cb73042e765584772157cf4a616bb5caf41cd8de0c5598f7a3b713298f64f7299d27cc01a3180e329240e1ade0e4362fa25512fb9423337ad739cf5d27f4a732e77990ad9f1c9", 0x96}, {&(0x7f0000000340)="d856c4705db726ea0dd089d0bef842832106ec35791002b33ba99404469281db6d267fbbe00e48b99fb85ee30dd474d82cf0bec24fd28879c3152c97586eeed2fc3f246b28c66f462c45887639be53cd1e69c9c15da5da2e7c77d2feed7ce4d0e3d5a7cc15928178baf36bd859c92c8550bab2c3a819392c7dd32739b139fe97fcc158aa84ae938655b8", 0x8a}, {&(0x7f0000000400)="ba463182cf7a27f02a447ae9d1", 0xd}, {&(0x7f0000000440)="277031daad849f098591096aeb8fad8a2940f7279d4f35205b572cc9ecca3070bad76fa15e96", 0x26}, {&(0x7f0000000480)="e1b9612968c2a2c238f4106dbaff8363b86409eb687a2c898cb84eb1cdf92834121a0dc823992738216c7735d77fc11422b84f04a4695c72e77a1a39467c59bfc264dc40ca33ab3b1c3d65ce1314d82a835357490f76acb0878ad20007cfc9ed56ef860b7bc4524ae70be90061f8a1a200371c29c02b930ceb7456bec7ac998a10525d3a184d0cc0ef8078ad00663e9b17c5a3d1181522510b5c5812af201773c8f6", 0xa2}, {&(0x7f0000000540)="b1b550eb285328d1e7e732b8231b8d6a9eac93f93a14343df4416fe66d16c94e55d6f9eb6100d48eb03f5f57af0244cc73f4ffca8dd4b4a17d734b0aa12b36b780b9394908396cb59f8c9b4e2ad103fdae97b8113bb44f2779e1b7cdb7487d6afb39dc86a4a817a349ad482f4ad625", 0x6f}, {&(0x7f00000005c0)="2f8eeed1692099e10fb1cac52a165e01dd130aef9a6c86298f841c35bdec69929d65e4cfc77d9aac434538620c60c15ce85948d70aa2c5929576f3a6c3a5237a1d5199310be4cf71886c51e1370f690627ebf8bc6bf7574263c0d2afa03cfba87b6ff526c80fa55a9bc75267d56bf463407f8869283d1220c701a95d362ce239df4ac8d73c1e5e1d658524", 0x8b}], 0x8}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f00000000c0)=0x400100000001, 0xffffffffffffff18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RREADLINK(r5, &(0x7f0000000740)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x4) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x6, @dev={[], 0x1f}}, 0x20, {0x2, 0x4e24, @local}, 'nr0\x00'}) wait4(0x0, 0x0, 0x0, 0x0) [ 740.472936] audit_printk_skb: 6 callbacks suppressed [ 740.480987] audit: type=1400 audit(1575422650.183:940): avc: denied { set_context_mgr } for pid=20888 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 740.507587] binder: 20888:20908 ioctl 40046207 0 returned -13 01:24:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'ip6gre0\x00', 0x4}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:10 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) 01:24:10 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1000, @empty, 0x7ff}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) socket$key(0xf, 0x3, 0x2) [ 740.526142] audit: type=1400 audit(1575422650.233:941): avc: denied { create } for pid=20910 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:24:10 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/\x06@W\x8f\xa9c\x01\x10\x00\x00\x00\x00\x00\x04\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet(0x10, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffffffffffff63) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) r5 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000000eb40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f000000ec40)=[{&(0x7f000000ebc0)="a1c6e8f331d9c047d51158fb67e571238ba8ae5082749f933f79bba1bf9036685003acafbbfd6de1e1c03f5e835d90b7af0e0d857261f17b3346bb76de428044749687a5de", 0x45}], 0x1, &(0x7f0000000dc0)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYRES16, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="33e4a02af38d84cd92d87026601d31713db01e8daf2a1b95651eb5b2ffbb8a1d8f97a925428f6f66000e1a280adbcc4b2ef8a9a3ab365950c0774496ed6366d8037e782ba6e3c6df2f017aca1a0d780d9d28f358b8f5ca0c6572b2d27fcbca556abe5127bd8e8288f70866051b558c", @ANYRES64=r5], @ANYRESDEC=r6, @ANYRES64=r7]], 0x8}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, 0x0, 0x8000fffffffe) 01:24:10 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) 01:24:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '^@\x00'}, &(0x7f00000000c0)=""/145, 0x91) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 740.806608] binder: BINDER_SET_CONTEXT_MGR already set [ 740.812371] binder: 20933:20954 ioctl 40046207 0 returned -16 [ 740.828813] audit: type=1400 audit(1575422650.543:942): avc: denied { call } for pid=20933 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 740.881560] binder: BINDER_SET_CONTEXT_MGR already set [ 740.887241] binder: 20933:20954 transaction failed 29201/-1, size 402653184--7885431403142184960 line 3022 [ 740.909860] binder: 20933:20963 ioctl 40046207 0 returned -16 01:24:10 executing program 5: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) 01:24:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0xcb, @dev={0xfe, 0x80, [], 0xd}, 0x8}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000140)={0x100000000, 0x6c8, 0x1, 0x0, 0x0, [{r3, 0x0, 0x5}]}) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x4) wait4(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0xffffffff, 0x73fb3daf, 0x400}, 0xc) 01:24:10 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) 01:24:10 executing program 4: r0 = eventfd2(0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r4, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:24:11 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x2b) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000001c0)=0x7) r5 = gettid() setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x10}) r7 = syz_open_pts(r6, 0x1) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) dup3(r7, r6, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 01:24:11 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) 01:24:11 executing program 5: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 741.351548] audit: type=1400 audit(1575422651.063:943): avc: denied { create } for pid=21012 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:24:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000110048400000000000000000000000000000000000000000000c00000000002c00000000000000180000000000006800ea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x2) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x2}, @timestamp, @timestamp, @timestamp], 0x20000000000000bc) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 741.479197] binder: undelivered TRANSACTION_ERROR: 29201 01:24:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r3}, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r3, 0xfffffffffffffff7) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 741.675866] binder: BINDER_SET_CONTEXT_MGR already set [ 741.709041] binder: 20933:21095 ioctl 40046207 0 returned -16 01:24:11 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/\x06@W\x8f\xa9c\x01\x10\x00\x00\x00\x00\x00\x04\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet(0x10, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffffffffffff63) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) r5 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000000eb40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f000000ec40)=[{&(0x7f000000ebc0)="a1c6e8f331d9c047d51158fb67e571238ba8ae5082749f933f79bba1bf9036685003acafbbfd6de1e1c03f5e835d90b7af0e0d857261f17b3346bb76de428044749687a5de", 0x45}], 0x1, &(0x7f0000000dc0)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYRES16, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="33e4a02af38d84cd92d87026601d31713db01e8daf2a1b95651eb5b2ffbb8a1d8f97a925428f6f66000e1a280adbcc4b2ef8a9a3ab365950c0774496ed6366d8037e782ba6e3c6df2f017aca1a0d780d9d28f358b8f5ca0c6572b2d27fcbca556abe5127bd8e8288f70866051b558c", @ANYRES64=r5], @ANYRESDEC=r6, @ANYRES64=r7]], 0x8}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, 0x0, 0x8000fffffffe) 01:24:11 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:24:11 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1000, @empty, 0x7ff}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) socket$key(0xf, 0x3, 0x2) 01:24:11 executing program 5: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) 01:24:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x1, 0x6ec0, 0x0, 0x6}) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000000c0)={0xffffffffffffff3a, 0x200, 0x3, 0x0, 0x0, [{r0, 0x0, 0x3185}, {r5, 0x0, 0xfffffffffffffffd}, {r6, 0x0, 0x7fffffff}]}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:11 executing program 5: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 741.980306] binder: BINDER_SET_CONTEXT_MGR already set [ 741.999207] binder: 21147:21164 ioctl 40046207 0 returned -16 01:24:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r4, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) 01:24:11 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) 01:24:11 executing program 5: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 742.190114] binder: BINDER_SET_CONTEXT_MGR already set [ 742.199474] binder: 21147:21152 ioctl 40046207 0 returned -16 01:24:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f00000000c0)=""/6, 0xff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) bind$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getpeername(r5, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000002c0)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r6, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)=0x1) tkill(r6, 0x4) wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000140)={0x8, 0x528, 0x2, 0x474d, 0x1b, 0x5, 0x80, 0x4, 0x2, 0x8001, 0x3, 0xbb89}) 01:24:12 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) [ 742.318059] audit: type=1400 audit(1575422652.033:944): avc: denied { create } for pid=21182 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:24:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000000)="bf825190b622021350ebffcf3ecb95dd4f8533a82bcd5e823fece179177b5b06fb8506a1338fe6676afd89e25584964c214ef26470484940f8a77fb1ee036d1c89a76ef3a43191ba642b2504be429234628f2e45512590", 0xffffffffffffff10) tkill(r3, 0x4) wait4(r3, 0x0, 0x80000000, 0x0) 01:24:12 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/\x06@W\x8f\xa9c\x01\x10\x00\x00\x00\x00\x00\x04\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet(0x10, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffffffffffff63) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) r5 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000000eb40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f000000ec40)=[{&(0x7f000000ebc0)="a1c6e8f331d9c047d51158fb67e571238ba8ae5082749f933f79bba1bf9036685003acafbbfd6de1e1c03f5e835d90b7af0e0d857261f17b3346bb76de428044749687a5de", 0x45}], 0x1, &(0x7f0000000dc0)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYRES16, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="33e4a02af38d84cd92d87026601d31713db01e8daf2a1b95651eb5b2ffbb8a1d8f97a925428f6f66000e1a280adbcc4b2ef8a9a3ab365950c0774496ed6366d8037e782ba6e3c6df2f017aca1a0d780d9d28f358b8f5ca0c6572b2d27fcbca556abe5127bd8e8288f70866051b558c", @ANYRES64=r5], @ANYRESDEC=r6, @ANYRES64=r7]], 0x8}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, 0x0, 0x8000fffffffe) 01:24:12 executing program 5: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) 01:24:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$UHID_CREATE2(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1a6) tkill(r2, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:12 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 01:24:12 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1000, @empty, 0x7ff}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) socket$key(0xf, 0x3, 0x2) [ 742.850908] audit: type=1400 audit(1575422652.563:945): avc: denied { set_context_mgr } for pid=21293 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 01:24:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/75) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) sendmmsg(r5, &(0x7f0000004ec0)=[{{&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x4}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="4ae394d804e583a2b6b32144d9fc3ba7b80535d9ff2f34b7413a6d1371745e032a78965598f8bbc579c30d4f26f35846350f15c06b4c17", 0x37}, {&(0x7f00000002c0)="f3b52f580d793220b8478e4161f709aa0867d933c8d2f9c0d6d0f19c3117be9d4662161db983a0ba2592460f0fc9c2919f58e56d0b0401e611df46e7f4b4b2aef92162e572629b0c1698a3867eb8da415e6a601d91e64273315b2f3502c6292201d774003a50c043a96cd23c0ca2b9619c6775d27c1ec4ba2ff1655a4c4d59f59f22e64f676762062bfa31082a35a5b6b57f784107a5504a6149e71416563d77d4c86a74514f80d3efbab167895c1beaa5f27ef0fa3f1d76c6ce2f74528010e0866e2e85045cab6d", 0xc8}, {&(0x7f00000003c0)="d500bfa767de5be75f6a113787607cb6fb58362c0649153045a056a3a8f7339d4dc9865fd335051975e46987c6dcbf785cf9f4244cca6b1dacf51df3c3983ac3c00a2dc1d6c9fa9b2db0d1e03fe453f5a97bd3e4a1dde6f4bb28e832a3561ab51116b0788cad705d98a179af5e894a523c585937d52c3159c66d79f4a7c2cf2fd3d6d8bbf9636da2dd1b091d909c5ad6fa99af76106ec1366bd443d3084f", 0x9e}, {&(0x7f0000000480)="76858b4759bceaf0dbb4a9159956d4132ea66efce2769ee38bb542e908912ff39bd3f98bcf1ddd808c5c456d0f18a4da3fbb92e5cc3c857bc0a88fc6a3c3f20c66689e64836bdeaac6cfde659ee52b6c91b3acec1825e0a89fc992129eaf01815ab6b91a8212734b72e23345a88873c085d67796a2d9a5ba2b339b", 0x7b}], 0x4, &(0x7f0000000500)=[{0x60, 0x108, 0x1ff, "10d93e2fed2bed88c56ea7e047c7331492fac3c25ff5592c900ab663846256440afdaf530cb46fd18d5238e29e5165fbb57517e838784c318705e5b6e32f63e0ee677c554ae9c858eae6"}, {0x20, 0x84, 0x800, "01d11c44255324b10da2890967"}, {0x68, 0x10c, 0x10000, "4e29d5d72b9b37f2a2597e7848f5fe3ecd03aad9402cc8923423d2a970daa3747b6ecfa8df65e3dcf1370e54c8e4a9e78d9c54c94f7823a74e82f3ac320250e328695c06b39f239319fcf04f2c5a1762021bc121d3f9f5"}, {0xe8, 0x10d, 0x80, "7022380e4b1548538df85cc76484c20404094dceb3ab593d6861dbb3d5e95e40da909df52b8c2c151a1aad607b7efdac6c9679c191f804cd8aaa0529d81eff94ef97768809736b6125d04107518b59c9f337b176690d1779e5e988bf02b176cd4d290c7317386bad1f4208629c8215f1cee490af7938d01b16fc83860688e69b1aa31370272b1febb994ca242392ce052c7d3c02251de7b0420019cf006521442aed26742abc6aa94ac07681388d0e28ccd5170bd64437656c041de770705ac58e5143790ac1d14207087b1d23daf719fa1b"}, {0x48, 0x111, 0x101, "5e23f8234efc6347e5604f0f1e5a00b905b6dcad38d2092a6bb286982e5b350b6b51b94e707b5ed6e55c27e846cca49caddea683"}], 0x218}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000740)="f17184120a4d8c5333f7a521c83f7b761ae9ee37f843f877e5b5d059871058699a96da55ef4222c09f79fce160f67b70ab3570d5073dbde4bf5b292a34f58c9141ce6f0b99632a08cb7491672f848f29ec305c6af2475afe410eaee2ebadda4553da6e3cfdff079754393711e07d5806d0ef54ce96e0c7168846909b3596d2003381c8deb71d55916422d6689230d44a34a5565ed9fe157550de5df7027cf44c489b267136ada4f66145214892dc2aee489c67fed6d8edaf0f781a9b64f1", 0xbe}, {&(0x7f0000000240)="c2a4470f688e185c071d8f5858ecb8645f9bf3abe59b8b3f3f8c349d13f67826ff676c83d5903152", 0x28}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="ab3d0deea71a0b937779f2796cf529d0ae1f1da42782567ba8ebdc3c67d76c62b9362fa3fbb4c5c4e7ec47e6d1ebc03c43f9a4053dc5ef40000387a8fc5608f2558e8799c0ea66c6a1d2b1d31e7302ac542dd78f4e67efb67583530b27844f8b53c50e45e1f544b919402d185ca2e18b0f1d08c6b7c775b2e6733defd43008e56f627969e1b9837613b46cd49b9c2a35b56724f7d775cf0b23060969279d546998076d3dec6566", 0xa7}, {&(0x7f00000018c0)="4f0a51d4ffee94c9650be27a9648046b6af433b0211e21e210cd2651c4391e4c193c3d2c62cae83c0452e9ec8c3dc7eca52969373520f1cc40714377563d54cd44", 0x41}, {&(0x7f0000001940)="41118704b746ed0883213f230e1ffe3da9abea481351aea479ea9f6b0f74dd8b9ed814429177bc809038ed9c8296aacb544de5cfe593cdf1c3905d2d3650025de5bbdaefacdb56e827d578dbe0eac9242c1af8cc87b94a748615e19a4e4ee77a5065f9d1cca3af39b9a654d6908aaa6db3179677796359f03de85c28a2694f60fe321a90506eefbf2c8366f30d94c53a979162d0d713c416439b943ed21597348cc1c8b1479d7b0802314267f6905b8e501ef71a3eac045694173bef0717cd3e84067b3ec5fabf9dc1edf62b45a064c53e9576364cf77a3d755bfe6b21b71d67b487354e02f782192e1790cabb48ce10c07cde347e", 0xf5}], 0x6, &(0x7f0000001ac0)=[{0x30, 0x112, 0x7f, "15f4b2cef9bd93008a16ba5d05f27b3aa877fbafd5b259aae51471"}, {0xa8, 0xb63ac39108fd6e1d, 0x3, "94e090039afdf96a23ba1501827a1cffd37ab77ec82da26d12043f0c89421ff61f676b3d5a5ddf7cce6af9d39503e402daf190bb57ccbc359768337e6d9f6ea54082c7abc822fca307bf73bdbbcc301f4650fd80d43e6136b31ba1e6b06be6d439650a41bcc3b8684a344c23b484146faed9df7f8577db8b06d514d9b457439e1be7cf6ba026e2504f4b0787e2cea303f4"}, {0x108, 0x105, 0xff, "0c099b8efa2e9b1ccad7cc8a84a7f00357db2e2343a24246514eb27ffd03bef0f05ccf3c5af6e7254c23eaafb8e4b1059042ccfc9e57e4f84575e4022b55cb781061de11f2910e3cc233a35e59015a197df4ffe20adceaba4b99bbe1468af191f8d91dc39f19c593c3ff418f5ee268794b33adaad11ebc6665e5356f76a4028ebf4209a5fce3efb3e81e6ead8447b763c696ed3ac244617f6be4e33414570256b6430811f9f0ce6403b60449e817d8f7573fd9b5b560534aa1363e357e7cf44df3bacda2dcfbc8d42123311c47e993aa40c9140b89676827779da715258a354a89fcef5098a304ac9f6fa812c0208860ca38de"}], 0x1e0}}, {{&(0x7f0000001cc0)=@rc={0x1f, {0x80, 0x1, 0x0, 0x0, 0x9}, 0xbb}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001d40)="87bdce3bb708dcdad8b31f8992c219018b849ba252f22b74e714d5314c", 0x1d}, {&(0x7f0000001d80)="37d2a9c38dfae535173c9023ae2fab5f904c51e529bfd093433e716959189e1c06731f44826fa22950c1d007d8c0c867ecf7453f7abc80791bf84e4487e0fc9691dcfe69f39f2e7de3431ab4c520a94165c8cb7316e43c894fda3983a23615b121599777517ca16671e71f8bab1007d7080feeed266b95acc38247c0609d29ed59e9d3ba45b9fa50440b5af94b80fe6e6af38d475a5ac3f6768f36355c5472d5c936e87c76c7c2c506f46b110ff920382f8cd7e1", 0xb4}, {&(0x7f0000001e40)="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", 0x1000}], 0x3, &(0x7f0000002e80)=[{0xd8, 0x6, 0x80000001, "049c0bc8bfbdd0ff4abf0257b34511f3e54a77468cfe897db24eddf108e65cda71a28d13c56dbe586336ad5ad615224efacb001aee14d9a9d5a3029eb68e8d8fc3754456b2826922d612621eb645423db98bb9e42c9bfa3128f30713d9b39c28b3e933258cc3a8cee2fbd4a062ad2815133b3a9382933a8718a86d3dcebf014fcff36a99d604c3aca9a55a9bf3331850d36785d70eb204263f8a9a7576337012f0ea09d9c4cf5dbc2f1f3f991318cce65c0e91b3c12483b1a965eaca85099721c7dc414d643c"}, {0x50, 0x6, 0x4, "6c125fabec943bef52f7903728fe7fd435f2228c5d74203b1dc14a4da0cc805dfee72c2dad59514d1d24b59eb6ff3c053d11935b366e605da2ba22"}, {0xe0, 0x107, 0x7ff, "4133cdcaf320db739ab439788194885f49b74638884913247a4c4c1fac52f0b6e3889d86aaf14d0dadd1bf31de432d13cd076de796e2acc769bae223161c8d26dd71e90b2a53cee4d6ef34385dc210a3191e6bc3bd6053adc678f39d7c35a9594a52e8e182037b7727ec1be27be8259d7bce1ef1783cf6b0b38990df4284432d2eebf19a2579de1acf891614d8a5df49dc4cac2b3e1bb10e27b2653009df9a933c65e8feb9a101f0ee71439bbf14476fd6808ffd15eb2e9edf42bfd5788192863d82fc5c829d887d2cd8572dd4f9b4"}, {0xb8, 0x8c, 0xc7ed, "19412ad80fe1f0679c093e8f020f42071e0b8a556832237dac524a1c2ae2a23b9ee8bab33006532023cc061086063220204ab292afe3009bfab9d18a6832a0482299a852b6d844009318f27c6bc8763b74f2f3d422d004792748079d8b76ec083e74fc73cb06c6abe2d3ec8d719d7340bf6f65c2ca21677ac45c4c8e5568fc5dcba3bc2e1f69060663eaf302bc800042b89726ca71f3ec35d190c1cf731fd1bca706"}, {0x78, 0x113, 0x4, "04414d0f506abc1bd35b42fb40739f1171cf53c005f1b8d9c110e68bbccd876876383a896166c917042aabd71e524fcf887fedcccbd4ed7d6dd3ad58ab7c453e2fe2dd984fb6b5d951945e2f3b87fedb80cefa3c0ba2e8c79e3c1492ad17dad0f5c3412eb5"}, {0x78, 0x105, 0xfff, "fa0c8d27a2ac1d447371e2e9cf92cd919cec84fd91f5204266fe0cb807f6637d9669481eca87c7a2068df86fda0ca7297cede8ee1a05519d0571aeec6a3f9a8f7e14f2742ef81234645fb096a9653f4599b2924c6142adc99c386862a32ec13e6767619be3ff7603"}, {0x10, 0x110, 0x8001}, {0x70, 0x100, 0x18, "07ab3405a5d39c3125cb78fea38fd6e006679f54ce3340564ce3031febcbd6ed4d77631e4f930b0793a0be5116b930dc931020589f7e51b4ae62c06626d1bb5e1abc8ddcdef1031f0d27c043f0cb9ea6706509c185a006feb2f0"}, {0x98, 0x10d, 0xffffffff, "6267a836d41bd0da272df93958bdb10f7a046d1d7147aa1735ddc1fbcfb722fd8378b932b870316370c9660ff8bbc682eedd19ebf2746f0c14caed1f8a0d7abdce78703af8c1f94b57291206e1fdcc1d91808b4e090c347e0e3ccc952f13c729e74105a17aec7b6d4edc979c207cca972a35b111b2fab2d347e281379a4cff914901e9c004"}, {0x40, 0x11, 0x6, "93e2779e94a2e0d824c8e6e4c31e4e327e0fbe6b1cca4ad00ba001967b9e27dac8a4a0aa4c14809c2e05c3e945"}], 0x508}}, {{&(0x7f00000033c0)=@generic={0xd, "2e0ce7c8e019b4728258fc0ae06c222c395fb4dc86bee758bb114cb469e352bca0d254b3a64fe5f055deb7811264ea6f63186bd347fac9d4e544b5ca54afb57630cc6dce49a4e1a562e9aa742c42aa7bedfe2b10967220609029eaf9b020507067226199ce26272f50d7850840b9e25d9531e4e53934559c35c56837b29e"}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000003440)="40e6cb512ca7abc2f69d791952661ea8cac56b59a5133865e4dc29414f6b82c73e24fc485ae52f6307dcb5d548e825c4c228e7dc9ea694fa818d8065e4cf05342b421fd4af00f6790c65d6a7cb5da7a67c9bf535e90497037dec7f4d44d4ccb23854831c14301a08348a6a9b1e1688efcc20ecfc09005be2bde6db749f757b913dde7563d63f6a925a1d6e9bd0b18fa7cbc7571c4f5b91a6b8a02608c2b2e03e7d120129700a1365ec8bf43e5967d5d8f98743810abbcedc5b11e944f1d6026c3a07885116b8e964a1962b9c02ee93ebbc6154ac7546", 0xd6}, {&(0x7f0000003540)="2e5c1f3e8c0d57ca8fe827cec3509011cb6c7e6a2cf4ff408ad2453456101b75d3de6053c29ff36a864033078c12b412abdbbf6bf4746aa7c64933fa637cc693d1c4a6138bbedb59da3f70c6c385800ffc1207034a3a39e93ba774028d9e9f946a4c7e3c58e1e18a4517c4f6899908698ea14a53045913aee9109744eaf8b77257bd00bad13fa4739a2d76c1370ea338fbfabc1ada04df79623bc522b5aa0684a1d84733bb3605b9644b22ae1ab25695902ebef5d60fc891cf28774c9743d905", 0xc0}, {&(0x7f0000003600)="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", 0x1000}, {&(0x7f0000004600)="c99f491c0238259bcfb5cabee6d8ccb9e5f6f904d2cf5035b025e1653439600c40d002f47b97336644958a0a3a43e39156aaeb5cec6a4d26aec336bed75f596cfb0c69e144648bb522c5842b3b1b2f35c56b6a8491e44a767dcf23a0d50e388329f7e6bb0fc7abda1ef159c56e94d615248e0aa0a62fd071b891b632e5a29f9781d31f3bf06a13373d1d6b0feed7d01b2b597396b07a", 0x96}, {&(0x7f00000046c0)="94ce125551d8e495bde13a85d2f1f10c41669bd65d23df2be7bc701f9cf18a07afcfee2ac70cc6d23a361456d6e87587462dbf2427faea0bb7437a355fd9bb78a9af30e4f5e4d2f34a7c780eab84c1e5b9b00fe158bd20619cb5b3a7c63c9875ad77bf8ce49942333a58b1b75194c32f8d65d25719232e8937fb45d2631a8177261309b66ab0da0ff2a34b6cf19997d59e388c8a36ef7e435a8add4864aea810cabd26fb0c03fe5c0d01774cddb2f7ce3204a73c0045836e5ac53c5ad3b8f636ba2ec8fcc01986cc631b", 0xca}, {&(0x7f00000047c0)="a9937794f8545f99a46ef1f1787faadec4059021746d01fefb1435f6c08de6fcbf80bfe0fcb536fcf1ff348f54b9c56f1bdb294cc2c68b71b20cbf9abad65eaf690fa6aff4668eed2d5519db8d46ec56a6532f2e7ba43bea63d39081123f6284f56e00f4729456f70a94a859d142dd951eff4e0db0ac9265116a20c01beb3deb0e1092fd417a83f1", 0x88}, {&(0x7f0000004880)="55782b483efa12d958986e68b2b88c79bd578b572427278e208743acfc971991b6421b581328694ad60468622033abf0bcc6e32fa18f9a02d0f27c6d399adde9107297f4578e796c112cf1c46d58524d58a99f4c69b366beb77aa507d3fe7461a8360ecfc878a51febac2d0ccf960f22b876c875806e87ac0178", 0x7a}, {&(0x7f0000004900)="79fe7dc667edb4cdbe5ab959f92c8ec0a6e53ef3e5f316de44089a1b2bafb0e59051bf2053adf734236e44f59fd4149069ed0b9e70991d51243ea1ad77fde2bba677782a1f4bbba826e6dec94fca75c771574cff979c0d9831c54589f4ea3811ff88629b21b96f32f5ad00b6275736f58f8c67c795c1acf1cd5b1db91c9e8363803dc39357cb66e745d9a4611096cc5bd55a705c90fefd3a3006533ff36fcc8c91e373352d762848ae2fd75e0fb20ab9c36a53c7cb98f14188b0af7896288f5c0a3e633336fc4209", 0xc8}, {&(0x7f0000004a00)="b100d772520c8e2865898042791873321d210e4a828ebaef020c5066890128143677078aa01632aeb959ee5f648ba83284be03472ffd1f461efd492b8f01e5aebf0b2e", 0x43}, {&(0x7f0000004a80)="89f02012d4de4d6494f8f2e584637e3ee940c9d12e58c48655d2584227bcb3e3ec5ec0989f8baa2bf1a0499cdbd45a13d748d1dbca6cd5485bf9cf7674bdfb4173db930e9cd4653c9e7bd61eae631a356248c57e417ad19dc1e6b9f7f5e83326357f222808b52fb3b48dfd6b5e5428f4c31bbb805a31c8ccf6a7df80a810356f40d77d6ab57bcff6ec8899c89e84f9b0ee35fda27d55a48d5f35cee32e592f60226585", 0xa3}], 0xa, &(0x7f0000004c00)=[{0x20, 0x11c, 0x4, "41d7bd6024288ea0c72aff7e1f73e751"}, {0xd0, 0x21c, 0xffff3c9f, "030e0777468e64748eb190499c79230321b9a7e9f0d5b20187cdd67e36ec20237adbeddb0d022debba2904b6a13b7868192f8d9963b8062b6cc7d1a525e3aaf2bbd08b42e9691e970c2b440d4dfd49fbbb28459495ce6868044f4bdd4d76a9aa6b69368fbf99504ada5df45d71e4183d37f9be394281c26992bff5f77503ac6f09ff74562eb99520bfd938dd1269a7da7885e656d2d0203cd89df8aa2cd280eebd1600628b559eab55076ea41fdd6263b7ade76af6c9265da1b6d5b5d8633d65"}, {0x100, 0x116, 0x10000, "29b81c4059b8c2be873fe4c3f0cab8654ca1295a39a1b43359e6b79afb6b5e91daffa88b0edd8abe564a865b2d2bbd51151bf8df9e9176e3749f8e0cef44de31bf3a581652e6813da5bdb6ac23bd88ee584e84ddc78c0d6fb489c7f489377d4e155f7c7d2eb93f211209453748c26db5b778adca75a758f322e3fb7f44e0f9eec6332e2c8075bf8e4f39d0a799353f7b845487ea11edd6feee832eccf4ac82cf9b50bed9a78ab0548d09c5df4cc00bb468a0636ae0c0eadf4b175f10ce26b8e7dcfa662badf33f3d285c125aa614ac901f3a265bbe65e4a7ee725bca68c93e414607a7da02955ed13d"}, {0x98, 0xb, 0x4, "7b79939d8b9a3f31abd487c6579b5899c26d0e1481b2484f8ce01ea150678f37e5e78ff41476a557b5d0aaf5514ffdbd70b4b4178067f2133e11820fdefb4eb508280bc5565219b45619b4a0f1908dc67486f1f432994f79ad15ee948877744c07b235b9d364d2e2d2e0bdf89a2a3350327a5db7d73561f5dd733dee1d4458b8bd4186f1965038c7"}], 0x288}}], 0x4, 0x8000000) tkill(r4, 0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 742.938908] binder: 21293:21293 ioctl 40046207 0 returned -13 [ 742.946881] binder: BINDER_SET_CONTEXT_MGR already set [ 742.952341] binder: 21280:21302 ioctl 40046207 0 returned -16 01:24:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000380)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) r10 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x3) r11 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r11) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r13 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r13, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13) write$binfmt_elf32(r4, &(0x7f0000003380)=ANY=[], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r11, 0x0) fcntl$setstatus(r11, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r16) pipe2$9p(&(0x7f0000000480), 0x4000) r17 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r17}) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r22, 0x200004) sendfile(r19, r22, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r22, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c010000d200000000df25ff020000230000000000000000000001ac14147090bb0000000000ffff00a200000000000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="b0001105083c", @ANYRES32=0x0, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d160000", @ANYRES32=0x0, @ANYRES32=r21, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff000000000000000000000000000000000600000000000000000000ff010000c06b6e0003000100"/111], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x45, 0x1, 0x9}, 0x100010014, r21, r18, 0x80000442, 0x5, 0xfffffffffffeffff, 0x9, 0x9, 0x20000000006, 0x0, 0x0, 0x3, 0x1f, 0x800000000000080, 0x1, 0x871, 0xee14}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r14, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r12, r13, 0x0, 0x180003) [ 742.972343] audit: type=1400 audit(1575422652.683:946): avc: denied { call } for pid=21280 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 743.026171] binder: BINDER_SET_CONTEXT_MGR already set 01:24:12 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 01:24:12 executing program 5: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) [ 743.043813] binder: 21280:21302 transaction failed 29201/-1, size 402653184--7885431403142184960 line 3022 [ 743.067440] binder: 21280:21311 ioctl 40046207 0 returned -16 01:24:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x4) wait4(0x0, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) 01:24:12 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, 0x0}]) [ 743.225786] audit: type=1400 audit(1575422652.933:947): avc: denied { create } for pid=21310 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 01:24:13 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, 0x0}]) [ 743.608666] binder: undelivered TRANSACTION_ERROR: 29201 01:24:13 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/\x06@W\x8f\xa9c\x01\x10\x00\x00\x00\x00\x00\x04\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet(0x10, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffffffffffff63) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) r5 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0563044000000000116348400000000000000000000000000000000000000000000000000000002c000000000000001800000000000000ebea519192096ee9e100000000000000059ba420a0ce6f9957d38d10aa"], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000000eb40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f000000ec40)=[{&(0x7f000000ebc0)="a1c6e8f331d9c047d51158fb67e571238ba8ae5082749f933f79bba1bf9036685003acafbbfd6de1e1c03f5e835d90b7af0e0d857261f17b3346bb76de428044749687a5de", 0x45}], 0x1, &(0x7f0000000dc0)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYRES16, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="33e4a02af38d84cd92d87026601d31713db01e8daf2a1b95651eb5b2ffbb8a1d8f97a925428f6f66000e1a280adbcc4b2ef8a9a3ab365950c0774496ed6366d8037e782ba6e3c6df2f017aca1a0d780d9d28f358b8f5ca0c6572b2d27fcbca556abe5127bd8e8288f70866051b558c", @ANYRES64=r5], @ANYRESDEC=r6, @ANYRES64=r7]], 0x8}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, 0x0, 0x8000fffffffe) 01:24:13 executing program 5: io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 01:24:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000001c0)) ptrace(0x10, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f00000000c0)={0x1, 'tunl0\x00', {}, 0x9}) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) ptrace$getregs(0xe, r3, 0x0, &(0x7f0000000000)=""/3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) tgkill(r3, r5, 0xa) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) ptrace$setopts(0x4206, r6, 0x0, 0x40) tkill(r6, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 01:24:13 executing program 3: io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, 0x0}]) 01:24:13 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1000, @empty, 0x7ff}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000840)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600008000000a00f50000000001800000007f6699001d00000000d6dbb905d1f86beb0000000d000800e0020000b89cc4b2bd01a12ba719fdffee000000809ac1ec3d95c9a0af6fa7fe174e404721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b73383b727e127c6a36da871a86cc8c8dda850000000002000100000000000000070080ffffff05000500000000000a000000de7af7bd3e10c05ce0099e088c374525b1f361d6c7358f00e22c00fe04654184a88aa49af6d3385443608204fd2f0a8e7f36b51b8c111a11526cc92a34da97348aa1e55e86429a374167641de7060933bfc02befaf8fd06658ea9c382b14d0c32fc0e89081335cacba6d7e1a8c9e627a6c5d885d96d8c456caa29fa7592f4872f237d960f9bd3e93872452834345b9138bd1e1ce35e8634023f06a625c651fa3c9e7840cd45f500b8d5c182f9235e3e211f77f7340cfe614a767b14472fdce52f619907383a4550d1787921983d11c1d024502db31beddd7e1f016168f2b741ee1c0c6ed773beccbd51165ddddb6c51d8183b345e3b8e138d48feca541571b26a65514b3f9cd2bd3eaf8944ec0337e31e2120e523edb1e8727eea2def30dcdd91f0aa0e815dcea57532f09f8424f03f2a793dc4e0b3c32e9bd37e11ff571d0994e0f71ef8e41f404603fc013"], 0xd8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) socket$key(0xf, 0x3, 0x2) 01:24:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 01:24:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000580)="f4fe2cc1f4bcb3b556fe0b66020000003cdd9100020000084c9b968e00"/39, 0x144, 0x0, 0x0, 0x283) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @mcast1, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f0000000