[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 9.464801] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.092888] random: sshd: uninitialized urandom read (32 bytes read) [ 18.139249] random: crng init done Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts. 2018/09/26 14:55:20 fuzzer started 2018/09/26 14:55:22 dialing manager at 10.128.0.26:43545 2018/09/26 14:55:23 syscalls: 1 2018/09/26 14:55:23 code coverage: enabled 2018/09/26 14:55:23 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/26 14:55:23 setuid sandbox: enabled 2018/09/26 14:55:23 namespace sandbox: enabled 2018/09/26 14:55:23 Android sandbox: /sys/fs/selinux/policy does not exist 2018/09/26 14:55:23 fault injection: kernel does not have systematic fault injection support 2018/09/26 14:55:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/26 14:55:23 net packed injection: enabled 2018/09/26 14:55:23 net device setup: enabled 14:55:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x1d2}}, 0x0) 14:55:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000400)="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", 0x200) 14:55:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x86c, 0x0, @local, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 14:55:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 14:55:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x12) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x10005, 0x0) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/4096, 0x1000) 14:55:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='\x00', 0x1, r1) keyctl$revoke(0x3, r2) request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) [ 59.823664] audit: type=1400 audit(1537973755.656:5): avc: denied { sys_admin } for pid=2079 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 59.975171] audit: type=1400 audit(1537973755.806:6): avc: denied { net_admin } for pid=2086 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 65.000807] audit: type=1400 audit(1537973760.836:7): avc: denied { sys_chroot } for pid=2094 comm="syz-executor1" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 65.069788] audit: type=1400 audit(1537973760.896:8): avc: denied { associate } for pid=2094 comm="syz-executor1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 14:56:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000002c0)={0x7fff, {{0xa, 0x4e23, 0x101, @ipv4, 0x100000001}}}, 0x84) getpid() clone(0x28000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000240)=0x1e) r2 = getpid() sched_setscheduler(r2, 0x2000000000000005, &(0x7f0000000200)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x400, 0x0) r4 = dup3(r1, r1, 0x80000) getsockname(r1, &(0x7f0000000500)=@can={0x1d, 0x0}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={@loopback, @mcast2, @mcast1, 0xa7b0, 0x1, 0x8001, 0x500, 0x80000001, 0x0, r5}) geteuid() ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r4) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000001000000000000000000000000"], 0x10) r6 = socket$key(0xf, 0x3, 0x2) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x10}, 0x10) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0215000b1400000025bd7000fddbdf25010014001f00000005001a00e00011151bbdc0770830000000000000000000000000000000000000000000000400140402000100000004d401082e020000002002001000000004d300005e66fba2b80cc3df066f5f5704d300000000010014000400000005001a0000000000000000000000000000000001000000000000000000000000000097d90a00140402000100000004d50100e002010000207f4ab38fb7997291c95028c6b44f58df7d8387b81cc6b74dbfe6391599cd925c5f5857fac7a22baf7cd42445045e76f211fe116d13f6b9243784241731103d47f70b57b0aa8aed49ec4a21bdfe652f04e15cdb583a84469002c4b2f2165d6bf9582a09794b3660907645e514761178ea1ac3f108c42fa84c8ff95bc14c3976f3f8aa5e153ce3bb2efba0991d94987d90fef9601e46c66ed50af2d32fef"], 0xa0}}, 0x40) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) [ 65.176387] audit: type=1400 audit(1537973761.006:9): avc: denied { set_context_mgr } for pid=3692 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 14:56:01 executing program 5: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0xfe9e) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) sendfile(r0, r0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/member\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r1, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f00000001c0)) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r6, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r7 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 14:56:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ptrace$setsig(0x4203, 0x0, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x4}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140), 0x4) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f0000000000)=0xff7c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) 14:56:01 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000002fc0), 0xfcf4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4) recvmmsg(r1, &(0x7f0000007400), 0x0, 0x0, &(0x7f0000007440)={0x77359400}) sendmmsg(r1, &(0x7f000000a8c0)=[{{&(0x7f0000000680)=@xdp, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000002880)=[{0xa0, 0x105, 0x7, "261b1aa4008512b3c4acc2d02d26d135695e963445c4e4f59f108f506220c494233e43694a52668d29c65c55469674494895e4b4a2410cfc196a891ed69b3ccfda31594f9c120b00be1a31f73a37952bf7b87086b9836124ed0fd18abfa8c93e0c8b6028c5f3d685c8ec59f03448c59b76df33cfd0cc8df5cfd31e01b6c43569d9ddd4053514f1dd4dc7d8e988ded62c3b"}], 0xa0}, 0x5}, {{&(0x7f0000009100)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000009600), 0x0, &(0x7f0000009640)}}], 0x2, 0x4000000) sendto$inet(r1, &(0x7f0000000100)="89", 0x1, 0x3fffffd, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 14:56:01 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x1c) [ 65.227684] audit: type=1400 audit(1537973761.056:10): avc: denied { dac_override } for pid=2093 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 14:56:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ftruncate(r0, 0x6) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000140)='./bus\x00', 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000080)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040)=0x4, 0x8000fffffffe) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x96, [], 0x0, &(0x7f0000000240), &(0x7f0000000300)=""/150}, &(0x7f0000000280)=0x50) syncfs(r1) [ 65.330870] audit: type=1400 audit(1537973761.166:11): avc: denied { create } for pid=3730 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 65.365454] syz-executor1 (3735) used greatest stack depth: 23080 bytes left 14:56:01 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x40) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/43) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x1000000) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@empty, @dev={[], 0x16}, [{[{0x9100, 0x9, 0x9, 0x4}], {0x8100, 0x6, 0x6}}], {@canfd={0xd, {{0x0, 0x2, 0x7ff, 0x80}, 0x18, 0x1, 0x0, 0x0, "ecf6d3c6733671846d93b4392371f36fde8509258161d0dc660dc5348c736d50538614f26c91b09e798a3fca36c8887b50538ce35d8b2694ca4231e8b41ab494"}}}}, &(0x7f0000000140)={0x1, 0x2, [0x7bf, 0xbc1, 0x870, 0x306]}) 14:56:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x276}], 0x200000b3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x205a, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:etc_aliases_t:s0\x00', 0xba9f5ea2141b1ac9, 0x20000001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2}) 14:56:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="477313c110109ce5a4329a0b1ceaac56468832ac217d9daaf912883d5f14de53e4d404d35c2cb1fd2903b32f4b16b944779cfba8b686e85514544a372319d0f8fcaaf27c55e749fa51a72cc9671b2d34c9a9387702618b6be1a458ef25643860a259f9b45410586de24c8139363bf8182c768df2cb186da87756eb26777332671a738215e698df"], 0x87) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0x100000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0xc9, 0x40}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000002c0)) ioctl$BLKBSZSET(r1, 0x40041271, &(0x7f00000000c0)=0x4) lseek(r1, 0x0, 0x2) sendfile(r2, r2, &(0x7f0000000040), 0x8000fffffffe) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="ff0fff91aa082e37440001000000000000c378b2d5f100007d95c6e557ad99a9994c4738f2bdf47c1d827887cbcbf70f5da50a7b3db172d61560bdb2d3b02ae4d0b9275dd5edc072789171b1246ed9efd640f0401eb74cb828496721a987d37afeb20415acb82d46d2ac16993b4df6c23b71897c8a5aaa6df4bd030000003cf9a3e9c9cee73e0a230000000000000000"], 0x35) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1b) r4 = gettid() capget(&(0x7f0000000480)={0x399f1336, r4}, &(0x7f0000000240)={0xe0, 0x0, 0x7e, 0x9, 0x1, 0x7}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x4, 0x6, 0x286, 0x0, 0x4}) 14:56:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) fchmod(r0, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="16016cbe7482908de17ca9007f265de4c107ccc1f43b511df6043d1f099cc92a6f82d9b3fd7f9480d78760458fb3250d01cd142480729b79389ec2e8cfe66aca9a10db2aaccfe749a8971e35d12bf845da0e68f3051a1c3261abcd9cc2456d131c64b6ae56b8cd8801319e27355032df60d61b4123fa5766f201bce151caaa84edeadd40e4f25f7f6b5c5b0c403e4810fe188c90a2ee8c003c31989f452ab02cd9a9d9488d4d73dc32283371c90b196ac0a45672890c269dc79adfe78a743e87bd7ba0f193e717e93944216236298ccfa45cbe4b9dc1ec51f65f2f", 0xdb}], 0x1, 0x0) 14:56:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x8, 0x0, 0x7}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@loopback, @local, @local, 0x2072, 0x2}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000380)="c943cc7228021228db5e2e8ef77ee6fe0faba077f8ee91c9731422e63599669bc82a66be730072f0ff12b3bb4140deeb3641d43a1a03d04916ad7f17f15015da1a339b29cc867fae78942624ddf1d099d02088d6165b637ae34bac0385845ff61b1bb2ae7fb1b4c66dbcb46f2a2468378a8e4d4c85ee144a788849e8cfce25b66dd774e3e067ad79d52538c2ebf1d0e23437c0c5312cc5570fa7e4df8fe08f1062003fddc1b15b78e82d81d90f5d75b123a95c349d7a4293cb9d07b927802b59de6fb1cae00775337a1221638a6decb7a8ab8707996e0e215973f4445fea33af2d29e92e70ba9567a2b0f4c38456c551dacc3f4488", 0xf5, 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)='/dev/uinput\x00', r2) rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000180)={0x6, 0x0, 0x7, 0x7fff}) ioctl$UI_END_FF_ERASE(r0, 0x4004556d, &(0x7f0000000080)={0x0, 0x8000}) [ 65.506158] audit: type=1400 audit(1537973761.326:12): avc: denied { fsetid } for pid=3761 comm="syz-executor4" capability=4 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 14:56:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) openat$null(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/null\x00', 0x200, 0x0) tkill(r1, 0x22) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x3fffc, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc004240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000240)) pwritev(r0, &(0x7f0000001480)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="2fb2b05660efe70a9006f6bb7d8a0e00ed7a8f21fbc84f034fca649c545fa8b937977593b39c5a594d73ac4b5c542666f33567484dac6f0230af355d26c987b38b48ed24610bf5fd0f1f70b706923a9db1516e93444b91200ca288bf", 0x5c}, {&(0x7f0000001340)="2f6717dd99fb9e6af3d3a5bf209ef95abae41cb1d15b2f7b888f4e729be806a8959ae5035b2afc7a55d14da1579820769ed3fcc318b7719dd3fbef66b7352c33dfbd14c61955361e9c811399cbbb350af5e0d21df38d2475c4c0c53106edaf84bbf91c9753fa34deb1273e736beea120f6be8e988af2ccfa8d5296ea5fa5c10688e5b31cfe5a44f1e66d387384371ccfdccd7e43ed253f414bbb59c905d4edddcb037f19b30d0dc8ac26444d", 0xac}, {&(0x7f0000001400)="2ca8db33ba31802d5b439f3ad1e88a810cc7fcbe2fb111845b4fa0e3abff6c9b9c2c297f4d16cacc5dbfbb676837ed402ba4d795453d456b2e66ec2e4c784992bb72a1665c341575a81db9f0aa0347a30b59", 0x52}], 0x4, 0x9) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0x200, 0x7fffffff, 0x9792}, 0xb) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000180), 0x4) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2200, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000001c0)=""/85) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 65.574348] audit: type=1400 audit(1537973761.406:13): avc: denied { dac_read_search } for pid=3761 comm="syz-executor4" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 14:56:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) fstat(r0, &(0x7f0000001500)) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001d00)) fstat(r0, &(0x7f0000001d40)) lstat(&(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)) r3 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002280)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000002380)=0xe8) fstat(r0, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = gettid() sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40050}, 0xc080) lstat(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$random(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0x0, 0x0) r8 = getgid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002500)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000002640)=0x1d) lstat(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)) sendmmsg$unix(r1, &(0x7f00000027c0)=[{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000280)="5f05", 0x2}], 0x1, &(0x7f0000001580), 0x0, 0x4c010}, {&(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001b80)}], 0x1, &(0x7f0000001e80), 0x0, 0x40090}, {&(0x7f0000001ec0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002180)="b35c3dd856ced31281eb6e8e6403628d5d2eea69f31fff01d2ddfaf44c93f07deb45207f55b36616688aa3d0bdf5205114bcfee1c0eaf5e60ca8bd16ba149129909a456417aebd9c0c60c01ab721b8d0ab51376f30a9b48accaf92a73f683968321a", 0x62}], 0x1, &(0x7f0000002740)=[@cred={0x18, 0x1, 0x2, r3, r4, r5}, @cred={0x18, 0x1, 0x2, r6, r7, r8}, @rights={0x14, 0x1, 0x1, [r0, r0]}, @rights={0x10, 0x1, 0x1, [0xffffffffffffffff]}], 0x54}], 0x3, 0x48000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4200, 0x0) r10 = getpid() ptrace$pokeuser(0x6, r10, 0x1, 0x8b49) r11 = dup2(r0, r9) ioctl$TUNGETFILTER(r11, 0x800854db, &(0x7f0000000140)=""/174) sched_setscheduler(r10, 0x5, &(0x7f00000002c0)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3d, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x10) 14:56:02 executing program 5: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0xfe9e) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) sendfile(r0, r0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/member\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r1, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f00000001c0)) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r6, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r7 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 14:56:02 executing program 2: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000200)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xff, r1, &(0x7f0000000280)="cb0f6fb5ffbd27b437d905cdded571950ce678eb17536d0909aacefe32401e60720293934e", 0x25, 0x2, 0x0, 0x0, 0xffffffffffffff9c}]) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r3 = getpid() lseek(r1, 0x0, 0x3) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r1, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00a115000000000000ffff000000000000e54f9a4438cbd317cfd5c88a3e7f2a0c63bbfe3f2d062f17628ff0c32c584732541e7a96f1cc63504326c74de9554cf58af1b7db7f2d2fd0434cbcd48e014fbc9f63db"]}) 14:56:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) writev(r0, &(0x7f0000001140), 0x0) 14:56:02 executing program 3: unshare(0x100) clone(0x0, &(0x7f0000000040), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000000140)) ioprio_set$pid(0x1, 0x0, 0x800004000) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000200), 0x8) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000040)) 14:56:02 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xfffffffffffffffd) clone(0x884000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000040), &(0x7f00000001c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x6, 0x2, 0xff, 0x0, 0x2}, 0x20) 14:56:02 executing program 0: r0 = socket$inet(0x10, 0x80000000000003, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x120) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f00000002c0)='.self#,^-\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000014c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001500)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000001600)=0xe8) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000001740)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000001480)=[{&(0x7f0000000080)={0x10, 0x1a, 0x700, 0x70bd2c, 0x25dfdbff}, 0x10}, {&(0x7f00000000c0)={0x3c, 0x1a, 0x410, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x75, @ipv6}, @generic="9dc019", @typed={0xc, 0x0, @str='ip6tnl0\x00'}, @typed={0x4, 0x22}, @typed={0x4, 0x3}]}, 0x3c}, {&(0x7f0000000180)={0xac, 0x24, 0x212, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x84, 0x63, @binary="3924b0ab288d55a3f8d4b01935e974415544d2c29ea8e6a413748cd533ec3ca6b8096516ba2ba5a866f40b84b14e6e2c285ea7f1362558bf4c784151d0348dad500e30960f0e91a3f4213b2dd4869492fb479c059d9d66dc1c7cb9b15892831935d24243e83263abfafc0b212cfba7bf4da659c53bca2979b301cca734c900dc"}, @nested={0x18, 0x87, [@typed={0x14, 0x8, @ipv6=@mcast2}]}]}, 0xac}, {&(0x7f0000000240)={0x68, 0x28, 0x200, 0x70bd25, 0x25dfdbfb, "", [@typed={0xc, 0x91, @u64=0x6}, @generic="3d716e8c613af4a1f0d90b9f210b90de40013cb9af6104a52843e7077ccac0d6b35df96dbac318049ef1b3bd1c7b4286a785703eb24d8f1dfbe22f5c44aaf3bfdff09e1c3b33a1c91dde843d"]}, 0x68}, {&(0x7f0000000100)={0x18, 0x37, 0x200, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x25, @fd=r0}]}, 0x18}, {&(0x7f0000000340)={0x1124, 0x2b, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x1014, 0xc, [@typed={0x8, 0x1b, @pid=r2}, @generic="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", @typed={0x8, 0x53, @fd=r0}]}, @generic, @nested={0x100, 0x7e, [@generic="3bac93240f04eddefbdbfabfc4983a18136155746919568bc31f1a1a1e816057898ea79c79b6569cfe570c8e5e7f1d71566c74742764fae5fca8fc317b880cb193fba32c80b40a968d9787f7a163d76ff1272cb8db3a60ba92926a8fe70e97d2b5c567144d9c48b1e98c7dcf5ca0b3fd12594e2222a2092feeff795dbbe93b5d5a8e01bae78615d38905b367ddcb25c72ecb", @generic="4c220c3f44b9ba818697d32effd5e88370c2774d1feaada2714521e6ea2cf706734981d7ece9b8289a9ee4cd4f8fb3fedb623ddbd2e43a43bd89522e6ee3f21dcd3017ec1fd85cbca854a5da3a6fa062ab861205ae749f4f900f6085f7b8fb945f", @typed={0x8, 0x70, @fd=r0}]}]}, 0x1124}], 0x6, &(0x7f0000001700)=[@cred={0x18, 0x1, 0x2, r3, r4, r5}], 0x18, 0x880}, 0x40000) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', @ifru_map={0x80000000, 0x7, 0x1, 0x496, 0x2, 0xa789}}) 14:56:02 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000140)={0xfff, 0x31, 0x1, 0xffffffffffffffff}) finit_module(r0, &(0x7f0000000180)='/selinux/policy\x00', 0x355a1213690c8a08) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x2, 0x2, 0x7ff, 0x8, [{0x413, 0x961b, 0x1, 0x0, 0x0, 0xa01}, {0x1, 0x3, 0x4, 0x0, 0x0, 0x2400}, {0x8000, 0x2, 0x0, 0x0, 0x0, 0x1002}, {0x7, 0x9, 0x4, 0x0, 0x0, 0x2}, {0x2, 0x9, 0x6, 0x0, 0x0, 0x3000}, {0x9, 0x1000, 0x3f, 0x0, 0x0, 0x580}, {0x3, 0x3, 0x0, 0x0, 0x0, 0x8a}, {0x100, 0x4, 0x8000, 0x0, 0x0, 0x808}]}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000100)) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)="4c766129239e94afef68055ec783420af728a55fdd3a5dd7b460b4ccc92931ef5815a7a4c9308386ef1426a20af29ea4c09b5d219f3e5a02be5b19b6a518e42c5f9ad91499afa0e74f59d2f802ce18a12ea4b3bdb04d39ec15543c8f2231215b5854bf8155c76ae446595686d5562482ee3d09b763bdca66574ddef73c986e23f0c6ea7b35bf3b83f4f2d2afd1ef02e6fff3077bcf682d124dcae9724bc3275bec176b74e8d642c150e0f5aa19c9f8fe97c3", 0xb2}, {&(0x7f00000001c0)="8ddc4a4ecd02eb0a54e29311c35f372e7412e90f0ebb3ab07a65da1287e118313e07aa9827e3fd258f5a56a43a98356dffd06f43fd84201d68", 0x39}, {&(0x7f0000000580)="1e80e3bcd0a9bdfe01ec", 0xa}], 0x3) fstat(0xffffffffffffffff, &(0x7f0000000200)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5, 0x2012, r2, 0xfffffffffffffffe) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 14:56:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000301ff07008fbda33d88c000001018dd"], 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\a\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc38d8bc4d043b19, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000200000000000000004000000004e03000700000000000000000000008500000039000000000000000000008a3da883000000000000000000000000001d5ff8ff010000000000000000000000180000002300000000000000db07000095000000000000006095506b6c28eab018dc642c5885f4b9da2c0eb6bd"], &(0x7f0000000240)='GPL\x00', 0xa9, 0x1f, &(0x7f0000000280)=""/31, 0x41100, 0x1, [], 0x0, 0xf}, 0x48) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) getsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xffffffffffffff5c) ioprio_set$uid(0x3, 0x0, 0x40) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) 14:56:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r1, &(0x7f0000000040)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = getpgid(0x0) openat(r3, &(0x7f0000000080)='./bus\x00', 0x400, 0x10) io_setup(0xc2, &(0x7f0000000100)=0x0) io_getevents(r5, 0x7, 0x2, &(0x7f0000000140)=[{}, {}], 0x0) fcntl$setown(r0, 0x8, r4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) [ 66.354347] audit: type=1400 audit(1537973762.186:14): avc: denied { write } for pid=3807 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 14:56:02 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r1 = dup3(r0, r0, 0x80000) write$P9_RATTACH(r1, &(0x7f0000000240)={0x14, 0x69, 0x1, {0x22, 0x4, 0x7}}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@rand_addr, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) clock_nanosleep(0x6, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0xfffffd3c, &(0x7f0000009ff0), 0x0, 0x0, 0x5883}, 0x0) 14:56:02 executing program 3: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000100)={0x100000001}) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @multicast2}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'sit0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000740)={@mcast1, 0x0}, &(0x7f0000000780)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000940)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000a40)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0}, &(0x7f0000000ac0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b00)={0x11, 0x0, 0x0}, &(0x7f0000000b40)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000d40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000d80)={'bridge0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000ec0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000f00)={@ipv4={[], [], @dev}, 0x0}, &(0x7f0000000f40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000fc0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000010c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000005f40)={'bond_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000006500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000064c0)={&(0x7f0000005f80)={0x518, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x184, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x1, 0x7f, 0x81, 0x1}, {0x200, 0xc000000000000000, 0x7ff, 0x9}, {0x1, 0x100, 0x3, 0x6}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x1ec, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x44e2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6d0f}}}]}}, {{0x8, 0x1, r12}, {0xb8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r14}, {0x78, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioprio_set$pid(0x2, 0x0, 0x0) 14:56:02 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/sockcreate\x00') write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f0000987000)={0x2, 0x0, @remote}, 0x10) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) getsockopt$inet_tcp_int(r1, 0x6, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x4) creat(&(0x7f0000000000)='./file0\x00', 0xc) [ 66.418254] audit: type=1400 audit(1537973762.246:15): avc: denied { read } for pid=3807 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 66.456600] capability: warning: `syz-executor3' uses deprecated v2 capabilities in a way that may be insecure [ 66.457394] audit: type=1400 audit(1537973762.266:16): avc: denied { create } for pid=3826 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 66.468733] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 14:56:03 executing program 5: unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/create\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0x0, 0x5, 0x5, 0x0, 0x3, 0x0, 0x0, 0x8, 0x401, 0x8000, 0x29080000000, 0xa9, 0x1, 0x4, 0x4572, 0x8, 0x80000000, 0x2, 0x9, 0x5, 0x3ff, 0x2, 0x0, 0x1, 0x9, 0x7fffffff, 0x40, 0xd7, 0x80, 0x80000001, 0x7fffffff, 0x4, 0x0, 0x9, 0x2e0, 0x0, 0x8000, 0x2, @perf_config_ext={0x2, 0xc3dd}, 0x8, 0xfffffffffffffffa, 0x10001, 0x7, 0x4, 0x5}, 0x0, 0xd, 0xffffffffffffff9c, 0x3) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10, 0x80800) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000440)='rdma.max\x00', 0x2, 0x0) memfd_create(&(0x7f00000004c0)='\'\x00', 0x2) r0 = creat(&(0x7f0000000500)='./file0\x00', 0xd) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$packet(0x11, 0x104, 0x300, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000280)=""/112) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f00000029c0)='/dev/snd/timer\x00', 0x0, 0x200) open(&(0x7f0000002a00)='./file0\x00', 0x203, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/urandom\x00', 0x400000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/full\x00', 0x20000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r2, &(0x7f0000000600)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000540)={"6c0000100004000000ffffffffff00", 0x101}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/ip_vs\x00') setsockopt$inet6_int(r5, 0x29, 0xff, &(0x7f00000000c0)=0x2, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_team\x00', 0x2}, 0x18) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$join(0x1, &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18) 14:56:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x5, 0x0, 0xffffffffffffff38, 0x149}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001200)={@rand_addr, @multicast1}, 0xc) r2 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x92) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000080)={0x7, 0x4}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) 14:56:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@loopback, @in, 0x4e23, 0x4, 0x4e20, 0x7c3, 0x2, 0x0, 0x80, 0x2c, r3, r4}, {0x1, 0x80, 0x10001, 0x1, 0x1, 0x320a7d7f, 0x9, 0x9}, {0x73, 0x9, 0x0, 0x2}, 0x1000, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x4d3}, 0xa, @in6=@mcast1, 0x0, 0x7, 0x2, 0xbb0, 0x8bd, 0x7, 0x7fffffff}}, 0xe8) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x7) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000001c0)=0x5, 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x80}, 0x40) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) io_setup(0xc2, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/xfrm_stat\x00') fcntl$setown(0xffffffffffffffff, 0x8, 0x0) io_setup(0x0, &(0x7f00000004c0)) readlinkat(0xffffffffffffffff, &(0x7f0000000480)='./bus\x00', &(0x7f0000000740)=""/241, 0xf1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) creat(&(0x7f0000000640)='./bus/file0\x00', 0x200000005) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xffffff25) socketpair(0x0, 0x0, 0x9, &(0x7f0000000500)) write(0xffffffffffffffff, &(0x7f0000001bc0)="b7db324f58092ce886f65d71e7de9ebc7cb1ef67a48a7b072999fdab1c3520e8176ac40d86", 0x25) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f00000003c0)={0xea1, 0x1ff, 0x1}) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000001b80)='oom_score\x00') 14:56:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x400001081f8) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x9) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = dup(r3) r5 = getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchownat(r2, &(0x7f0000000040)='./bus\x00', r5, r6, 0x1c00) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 14:56:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) getsockopt$inet6_buf(r0, 0x6, 0x1d, &(0x7f0000000180)=""/45, &(0x7f00000001c0)=0x2d) 14:56:03 executing program 2: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000200)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xff, r1, &(0x7f0000000280)="cb0f6fb5ffbd27b437d905cdded571950ce678eb17536d0909aacefe32401e60720293934e", 0x25, 0x2, 0x0, 0x0, 0xffffffffffffff9c}]) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r3 = getpid() lseek(r1, 0x0, 0x3) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r1, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00a115000000000000ffff000000000000e54f9a4438cbd317cfd5c88a3e7f2a0c63bbfe3f2d062f17628ff0c32c584732541e7a96f1cc63504326c74de9554cf58af1b7db7f2d2fd0434cbcd48e014fbc9f63db"]}) 14:56:03 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f00009b9000)="05000900667300", 0x801008, &(0x7f0000000000)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') sync() renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) 14:56:03 executing program 0: lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00') mkdir(&(0x7f0000578000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x22) 14:56:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x0, 0x7, 0x80000000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000001c0)=""/178, &(0x7f00000000c0)=0xb2) signalfd4(r2, &(0x7f0000000140)={0xc000000000000000}, 0x8, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)) signalfd4(r0, &(0x7f0000000000)={0x7ceea686}, 0x8, 0x80800) 14:56:03 executing program 0: r0 = gettid() r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffffffffffb3, 0x20000, 0x65f, 0x3, 0x2, 0x3, 0x3, 0x1ff, 0x64, 0x40, 0xa6, 0x7, 0x7f15, 0x38, 0x1, 0x6, 0x2, 0xff}, [{0x4, 0x1ff, 0xfffffffffffffffa, 0x2, 0xfc, 0x1000, 0x7, 0xce9}], "d03624f8fd3a9408ad612a3fdf632bfe9b31b870a6aa791c220248c7233062d2d16e4e5a10e4bcdc3450a2e2144e44ccbc7e51424391a0ab0eab30bd42e61ea08b682585fee06dd180fe824ed7c25a4def5d03f3fb3b1a59137f7490db38a0901757cd66703c57fca56a3d3f912743d9ff8fba75b5d82f5a", [[], [], [], [], [], [], [], [], [], []]}, 0xaf0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='cmdline\x00') exit(0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000040)=""/13, &(0x7f0000000080)=0xd) ptrace$peek(0x1, r0, &(0x7f0000000140)) readv(r2, &(0x7f0000001440)=[{&(0x7f0000001380)=""/140, 0x8c}], 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 14:56:03 executing program 5: unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/create\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0x0, 0x5, 0x5, 0x0, 0x3, 0x0, 0x0, 0x8, 0x401, 0x8000, 0x29080000000, 0xa9, 0x1, 0x4, 0x4572, 0x8, 0x80000000, 0x2, 0x9, 0x5, 0x3ff, 0x2, 0x0, 0x1, 0x9, 0x7fffffff, 0x40, 0xd7, 0x80, 0x80000001, 0x7fffffff, 0x4, 0x0, 0x9, 0x2e0, 0x0, 0x8000, 0x2, @perf_config_ext={0x2, 0xc3dd}, 0x8, 0xfffffffffffffffa, 0x10001, 0x7, 0x4, 0x5}, 0x0, 0xd, 0xffffffffffffff9c, 0x3) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10, 0x80800) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000440)='rdma.max\x00', 0x2, 0x0) memfd_create(&(0x7f00000004c0)='\'\x00', 0x2) r0 = creat(&(0x7f0000000500)='./file0\x00', 0xd) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$packet(0x11, 0x104, 0x300, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000280)=""/112) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f00000029c0)='/dev/snd/timer\x00', 0x0, 0x200) open(&(0x7f0000002a00)='./file0\x00', 0x203, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/urandom\x00', 0x400000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/full\x00', 0x20000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r2, &(0x7f0000000600)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000540)={"6c0000100004000000ffffffffff00", 0x101}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/ip_vs\x00') setsockopt$inet6_int(r5, 0x29, 0xff, &(0x7f00000000c0)=0x2, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_team\x00', 0x2}, 0x18) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$join(0x1, &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18) 14:56:03 executing program 2: unshare(0x800) r0 = socket(0xa, 0x1, 0x0) fallocate(r0, 0x20, 0x7, 0xadc1) shutdown(r0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000040)='!+keyring\\\x00', 0xb, 0x1) 14:56:03 executing program 2: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r1 = signalfd4(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x800) close(r0) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8007bff, 0x749402) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) fcntl$setlease(r2, 0x400, 0x1) write$UHID_INPUT2(r0, &(0x7f0000000180)={0xc, 0x4c, "7eea6219dd762e4e1315a57a7f39b916ff55e44109539e2780f3e42721f059d8ed42f2232a59948985fc64d36aa0256fa281d50dd31357ca3936fc460180756190fd1253e84847a95d096beb"}, 0x52) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000080)=0xffffffff) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2d696f6473202f637075202f076f202f63707500000000d7100000656d6f7279202b72646d61202b70696473205bf804466661a7420de00dd6a2f4de5eec0af8cfdf9f42a323bd2ee134ed39bb03ff00000900000000003404509d5fc835c0000000"], 0x37) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)) ftruncate(r2, 0x4) msync(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4) fsetxattr$security_smack_transmute(r1, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) 14:56:03 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x0, [], [{0x0, 0x7f, 0x4, 0x8, 0x2, 0x71}, {0x2c07, 0xb, 0x8f2, 0x49b823fb, 0x8000, 0x1}], [[], [], [], [], []]}) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x23800, &(0x7f0000000140)=ANY=[]) quotactl(0x0, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)) 14:56:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x400001081f8) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x9) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = dup(r3) r5 = getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchownat(r2, &(0x7f0000000040)='./bus\x00', r5, r6, 0x1c00) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 14:56:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 14:56:03 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f00009b9000)="05000900667300", 0x801008, &(0x7f0000000000)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') sync() renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) 14:56:03 executing program 3: personality(0x35375d2df5f70313) uname(&(0x7f00000006c0)=""/176) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4000, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@fragment={0x2b, 0x0, 0x5, 0x3, 0x0, 0x101, 0x64}, 0x8) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000c, 0x10, r0, 0x0) 14:56:03 executing program 2: r0 = gettid() r1 = socket$inet(0x2, 0x400800000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 14:56:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000015ff0)={&(0x7f0000013000)={0x2c, 0x21, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x14, @u32=0xffffffffffffffff}]}, 0x2c}}, 0x0) 14:56:03 executing program 3: syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = inotify_init1(0x800) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x8001}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xc000, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xc4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'veth0_to_bridge\x00', 0xb000}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000040)={&(0x7f0000000040)}) 14:56:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 14:56:03 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) setpgid(r1, r1) ptrace$getenv(0x4201, r1, 0x0, &(0x7f0000000000)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) 14:56:03 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@empty, @dev, @multicast2}, &(0x7f0000000100)=0xc) mount(&(0x7f0000000000), &(0x7f0000000880)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x0, &(0x7f0000000180)) 14:56:03 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x202, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@dev, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000240)={r1, 0x1, 0x3}, 0xffffffffffffffeb) r2 = socket$inet6(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000280)={{0x0, @local, 0x4e22, 0x0, 'wlc\x00', 0x0, 0x7, 0x36}, {@loopback, 0x4e22, 0x4, 0x200, 0x3ff, 0x6000}}, 0x44) sendmsg(r2, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91b5000000", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 14:56:03 executing program 3: eventfd(0x100) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="dd34140000de000000c5d20000000000000027d0c7"], 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000180)=0x3) write(r1, &(0x7f0000000280), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x6, &(0x7f0000000300)={r5, r6+10000000}) write$P9_RGETLOCK(r2, &(0x7f0000000140)={0x22, 0x37, 0x1, {0x0, 0x0, 0x5, 0x0, 0x4, 'user'}}, 0x22) io_setup(0x7fffffff, &(0x7f0000000340)=0x0) io_cancel(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f00000003c0)="026514727d45f322ea9d60536d48b0eb9e85dc3bd6af3358fb89b4829cf2901433864ff454347422e5e44903c138433c0425a287cc8c06083224b93532ba9601a5210ec450788ea772b70a41294b834cf5ae3bf448215680f321b61684918d870b1d467ee5b82bcbb4997eefcc0735d8ca4de17e4cf68f95a2725685ef1ad94a751f6eb9a1ad9f61cd8b3fbe5172136cad7b24701b3143b2a9a79c4e9be541753e064dfa8bf0a87d3cf8436bf256a9155922f762c7c9a1ba2b2af9bcb0107b1ae9f5bb9b647b805efce5362cbccf5b7b52b611a92d468bd14a0c2c1d0ce2", 0xde, 0x5, 0x0, 0x1}, &(0x7f0000000500)) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) write$FUSE_LK(r4, &(0x7f0000000280)={0x28, 0x0, 0x3, {{0x100, 0x45, 0x1, r8}}}, 0x28) 14:56:03 executing program 5: keyctl$join(0x1, &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}) keyctl$session_to_parent(0x12) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40040, 0x62) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x4, 0x2, 0x4, 0x1000, 0x40, 0xfffffffffffffffc, 0x10000005b26, 0x6, 0x5, 0x8}) keyctl$session_to_parent(0x12) 14:56:04 executing program 1: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x25d4) getrandom(&(0x7f0000000480)=""/59, 0x3b, 0x1) 14:56:04 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x1000004e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './bus\x00'}, 0x28) accept4$unix(r2, &(0x7f0000000100), &(0x7f0000000000)=0x6e, 0x80000) r3 = getegid() ioctl$TUNSETGROUP(r2, 0x400454ce, r3) 14:56:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000180)) 14:56:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, &(0x7f0000000040)=0x10) ioctl$sock_ifreq(r0, 0x800000089f2, &(0x7f0000000100)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x101, 0x4) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x501200) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x0, 0x3638}, {0x0, 0x258cdd6f}]}, 0x14, 0x3) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) 14:56:04 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f00000003c0)=0x4, 0x4) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ptrace$setregset(0x4205, r2, 0x206, &(0x7f0000000380)={&(0x7f0000000280)="6db2563b5a2fce396dfc52dbd538cccd2334340a90df644c85f204fd7d38852fa10ccdc45147f9923fa8b420da8527f33935f0895ce591b9e87b5bca8ac7d20e1283472511ed4022a67078ac5c2073dc82c09aa3d8be595a08fda53809064eb363208b3d30976f2ef5e05f9253274ab1f7ef8e81c073a59d5d792d7d75652ac8008aed5e470593cab6312851dd8448a6a468f0fc6a9dd175695ff67dc5c5fff4375c211578c4bec14f893214125151f3a33a3e256077b674c470ad544436c7a02d5277c168dbb69834623326a2", 0xcd}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xfffffffffffffe8a, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000200)=@vsock, 0x80, &(0x7f00000006c0)}, 0x0) 14:56:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socket$inet6(0xa, 0x807, 0x80000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pwritev(r3, &(0x7f0000002640)=[{&(0x7f0000000640)}], 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) sendfile(r3, r2, &(0x7f0000000080), 0xfffffffffffffffc) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r4, 0x2, 0x1) socket$inet6(0xa, 0x80007, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r8 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000280)={0x1, 0x0, {0x17, 0x25, 0x2, 0xa, 0x1, 0x800, 0x5, 0x46, 0xffffffffffffffff}}) setresuid(r7, r8, r9) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) r10 = inotify_init1(0x80000) fcntl$getownex(r10, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$getenv(0x4201, r11, 0x1000, &(0x7f0000000200)) r12 = dup(r6) setsockopt$inet6_tcp_int(r12, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) 14:56:04 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fadvise64(r0, 0x0, 0x40202, 0x200000000) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x7, {0x200}}, 0x18) 14:56:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x42, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000000c0)) setsockopt$inet6_buf(r0, 0x29, 0x80000000000019, &(0x7f0000000080), 0x0) 14:56:04 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8), &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x0, 0xfffffffffffffffd) sendfile(r1, r1, &(0x7f0000000040), 0x200) 14:56:04 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f00000003c0)=0x4, 0x4) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ptrace$setregset(0x4205, r2, 0x206, &(0x7f0000000380)={&(0x7f0000000280)="6db2563b5a2fce396dfc52dbd538cccd2334340a90df644c85f204fd7d38852fa10ccdc45147f9923fa8b420da8527f33935f0895ce591b9e87b5bca8ac7d20e1283472511ed4022a67078ac5c2073dc82c09aa3d8be595a08fda53809064eb363208b3d30976f2ef5e05f9253274ab1f7ef8e81c073a59d5d792d7d75652ac8008aed5e470593cab6312851dd8448a6a468f0fc6a9dd175695ff67dc5c5fff4375c211578c4bec14f893214125151f3a33a3e256077b674c470ad544436c7a02d5277c168dbb69834623326a2", 0xcd}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xfffffffffffffe8a, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000200)=@vsock, 0x80, &(0x7f00000006c0)}, 0x0) 14:56:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = dup2(r0, r0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000040), 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000140)=""/143) 14:56:04 executing program 5: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140), &(0x7f0000000180)='=', 0xffffffffffffff61, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000280)=""/15, 0xf) 14:56:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x2, 0x0) io_setup(0x2e1, &(0x7f0000000000)=0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x3f, r0, &(0x7f0000000080)="5bb64d6c4339dc9d9a8aa2f48ddc64836a62bba3e9c234b4da7eb7e55bcb327d12b8c7c81a191ca96b7e5a3b2c29f7b619dbb1c351ec3aef7226b091b8fc2d200a890dece678c11b8ea4012b9d9661ebe6b14b205f06fe0e82e2525d2370bd80a31f4cb066eca672bd5930570f704ba8ac466127b5a1536339fec5bacb6252dc97c9be32fb535625d7287eb2", 0x8c, 0x8, 0x0, 0x0, r2}, &(0x7f0000000200)) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0x1, 0x62, 0x7, 0x81}, 0x34, [0xa6, 0x9, 0x8, 0x81, 0x0, 0x8, 0x5, 0x7, 0x3, 0x8000000000000000, 0x0, 0x38, 0x3, 0x8, 0x1, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x5, 0x1, 0x3, 0x3, 0x8001, 0x2, 0x0, 0x1, 0x1, 0x8, 0x5, 0x1ff, 0x401, 0x2, 0x7, 0x3, 0x9, 0x7b, 0x420, 0x4, 0x74d, 0x1, 0x40, 0xc1b0, 0x5, 0x1ff, 0x80000000, 0x1000, 0x6, 0x6, 0x3, 0x7fffffff, 0xa8000000, 0x0, 0x8000, 0xffff, 0x3ff, 0x1, 0x1, 0x2, 0x800, 0x8, 0x8, 0x2], [0x5, 0x55d, 0xe3, 0x2, 0x5, 0x3, 0x10000, 0x4dc6, 0x3, 0x7, 0x7, 0x7ff, 0x1, 0x10001, 0x8000, 0xc0d, 0x7, 0x80, 0x2, 0x7f, 0x6, 0x400, 0x6, 0x1, 0x1, 0xefa9, 0x1, 0x1, 0x4fa, 0x800, 0x963f, 0x8001, 0x19, 0x1000, 0x100000001, 0xffffffff, 0x2, 0x4, 0x80000001, 0x6, 0x7, 0x7f90, 0xca3, 0x3, 0x4, 0x7f3, 0xff, 0x101, 0x4, 0x80000000, 0x7, 0x1, 0x10001, 0x9, 0x7, 0x9, 0x8080000000000, 0xffffffff, 0x4, 0x1, 0xfffffffeffffffff, 0x2359261e, 0x0, 0x7ff], [0xb12, 0x8, 0x5, 0x3, 0x1, 0x7, 0x10000, 0x7, 0x8, 0x7, 0xb3, 0x6cda, 0x10001, 0xfffffffffffffffc, 0x4, 0x100, 0x5, 0x1, 0x6, 0xffffffff, 0x1ff, 0x1, 0xff, 0x4, 0x8, 0x80000001, 0xffffffff, 0x8, 0x7, 0x10000, 0x9, 0x6, 0x4, 0xfffffffffffffffd, 0x6, 0xfffffffffffffff9, 0x6, 0x1, 0x100, 0x5d, 0xffffffff, 0x9, 0xfffffffffffffff8, 0x7, 0xed, 0x7, 0x7fff, 0x7ff, 0x80000001, 0x2, 0x80000001, 0x0, 0x100000001, 0x2, 0x1, 0x3f, 0x8, 0x3, 0x5, 0x7, 0x80000001, 0x4, 0x7ff, 0x8150], [0x1f, 0x9, 0x2, 0x7ba, 0x401, 0x0, 0x8, 0x1ff, 0xffffffff, 0x401, 0x5, 0x7, 0x6, 0x1, 0x4, 0x15d1, 0x0, 0x92, 0x7, 0xdf7, 0x20, 0x400000000, 0x8, 0x9, 0x8, 0x16, 0xffff, 0x9, 0x313, 0xc9c4, 0x24000, 0xb1, 0x8, 0xfffffffffffffffd, 0xffffffffffff0001, 0x8a5, 0x27d, 0x20, 0x1, 0x20, 0x1, 0x1, 0x8, 0x1, 0x5, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x6, 0x0, 0x20, 0x100, 0x2db, 0x5, 0x7374a880, 0x72, 0x48000000000000, 0x3]}, 0x45c) write$FUSE_GETXATTR(r3, &(0x7f0000000280)={0x18, 0xfffffffffffffff5, 0x3, {0xffff}}, 0x18) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000240)) r4 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000040)={0x0, 0x0, 0x0, {}, {}, @rumble}) 14:56:04 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xc0}}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) 14:56:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002900)='mounts\x00') ioctl$int_out(r0, 0x5462, &(0x7f0000000100)) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 14:56:04 executing program 3: eventfd(0x100) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="dd34140000de000000c5d20000000000000027d0c7"], 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000180)=0x3) write(r1, &(0x7f0000000280), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x6, &(0x7f0000000300)={r5, r6+10000000}) write$P9_RGETLOCK(r2, &(0x7f0000000140)={0x22, 0x37, 0x1, {0x0, 0x0, 0x5, 0x0, 0x4, 'user'}}, 0x22) io_setup(0x7fffffff, &(0x7f0000000340)=0x0) io_cancel(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f00000003c0)="026514727d45f322ea9d60536d48b0eb9e85dc3bd6af3358fb89b4829cf2901433864ff454347422e5e44903c138433c0425a287cc8c06083224b93532ba9601a5210ec450788ea772b70a41294b834cf5ae3bf448215680f321b61684918d870b1d467ee5b82bcbb4997eefcc0735d8ca4de17e4cf68f95a2725685ef1ad94a751f6eb9a1ad9f61cd8b3fbe5172136cad7b24701b3143b2a9a79c4e9be541753e064dfa8bf0a87d3cf8436bf256a9155922f762c7c9a1ba2b2af9bcb0107b1ae9f5bb9b647b805efce5362cbccf5b7b52b611a92d468bd14a0c2c1d0ce2", 0xde, 0x5, 0x0, 0x1}, &(0x7f0000000500)) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) write$FUSE_LK(r4, &(0x7f0000000280)={0x28, 0x0, 0x3, {{0x100, 0x45, 0x1, r8}}}, 0x28) 14:56:04 executing program 1: eventfd(0x100) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="dd34140000de000000c5d20000000000000027d0c7"], 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000180)=0x3) write(r1, &(0x7f0000000280), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x6, &(0x7f0000000300)={r5, r6+10000000}) write$P9_RGETLOCK(r2, &(0x7f0000000140)={0x22, 0x37, 0x1, {0x0, 0x0, 0x5, 0x0, 0x4, 'user'}}, 0x22) io_setup(0x7fffffff, &(0x7f0000000340)=0x0) io_cancel(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f00000003c0)="026514727d45f322ea9d60536d48b0eb9e85dc3bd6af3358fb89b4829cf2901433864ff454347422e5e44903c138433c0425a287cc8c06083224b93532ba9601a5210ec450788ea772b70a41294b834cf5ae3bf448215680f321b61684918d870b1d467ee5b82bcbb4997eefcc0735d8ca4de17e4cf68f95a2725685ef1ad94a751f6eb9a1ad9f61cd8b3fbe5172136cad7b24701b3143b2a9a79c4e9be541753e064dfa8bf0a87d3cf8436bf256a9155922f762c7c9a1ba2b2af9bcb0107b1ae9f5bb9b647b805efce5362cbccf5b7b52b611a92d468bd14a0c2c1d0ce2", 0xde, 0x5, 0x0, 0x1}, &(0x7f0000000500)) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) write$FUSE_LK(r4, &(0x7f0000000280)={0x28, 0x0, 0x3, {{0x100, 0x45, 0x1, r8}}}, 0x28) 14:56:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) [ 68.989247] input: syz1 as /devices/virtual/input/input6 14:56:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8001, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000140)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f0000001840)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) munmap(&(0x7f00003a9000/0x1000)=nil, 0x1000) 14:56:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x20, 0x22, 0x400, 0x70bd26, 0x25dfdbfd, {0x2, 0x34, 0x20, 0x0, 0xc6, 0x0, 0x0, 0x7, 0x4}, ["", "", ""]}, 0x20}}, 0x0) [ 69.042415] input: syz1 as /devices/virtual/input/input7 14:56:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="43b811e4778e5a2dc592756df755a111233d97b7cbb499d62ee1260398c97fad10a75c8b21f60706367bb28f8b0a"], 0x1) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r2 = open$dir(&(0x7f0000000440)='./file0\x00', 0x501cc2, 0x10) readlinkat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=""/38, 0x26) r3 = dup(r1) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000500)=""/171) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in=@local, @in6=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/75, 0x4b}, 0x0) 14:56:05 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast1, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4400000029000000040000004d06472e580100000092e144adbb1195b36953e95936dcf1d013921f884bcc2f83afd18c838fb9887edbdcf3900fb800c29ecb3bf68dc42f"], 0x44}}], 0x1, 0x0) 14:56:05 executing program 0: clone(0x0, &(0x7f00008dcfff), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000002000)) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='erofs\x00', 0x2004000, &(0x7f0000000140)="1400") waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) 14:56:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000048, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000180), &(0x7f00000001c0)=0x4) accept4(r0, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r1}, 0x14) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'sit0\x00', 0x7fff}) 14:56:05 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0x14, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200802, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x8000, 0x20) r1 = memfd_create(&(0x7f0000000080)='system.posix_acl_default\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) 14:56:05 executing program 5: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"67726575617040e04407ffff00", 0x43732e5398416f1a}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000300)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") renameat(r1, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') 14:56:05 executing program 0: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) listen(r0, 0x81) setsockopt$inet_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000080)="2ffeeb62088fc8454ab830d276b7e93599f372f665384952dfd4b1a61ae7d69f84616f7d57b6addcf98d6ea5027cb250", 0x30) io_setup(0x4, &(0x7f0000000140)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r2, r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x0, 0xa0, 0x5, 0x5}) dup3(r0, r2, 0x80000) [ 69.281230] device lo entered promiscuous mode [ 69.381726] device lo left promiscuous mode 14:56:05 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x100}) ioctl$TCSBRK(r0, 0x5409, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x0, 0x0, 0x1f, 0x400, 0x4}) 14:56:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) clone(0x2000400, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x20240, 0x0) restart_syscall() getpid() r2 = fcntl$getown(r0, 0x9) sched_setscheduler(r2, 0x0, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x29, 0xffffffffffffffff, &(0x7f00000001c0)=0x323) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00'}) 14:56:05 executing program 2: r0 = gettid() r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/mls\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1a) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/load\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_procfs(r0, &(0x7f00000007c0)='limits\x00') ioctl$TIOCEXCL(r4, 0x540c) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000880)=0x80) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x100000000032, r4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x7a, [0x0, 0x20000040, 0x20000070, 0x200002b0], 0x0, &(0x7f0000000000), &(0x7f0000000cc0)=ANY=[@ANYPTR64=&(0x7f0000000ac0)=ANY=[@ANYBLOB="531eb7f770726013ff3102bc4094c19855c425bc27b7264879e9c464874f221e8f3232fb161b08b5cfedbc6ac44e6e82d85251ab1d11fcd729630ffa8f5298f75cbd9c1d97570244bf7341d60bbdd5478db242ba24f420a929486f34029f3510dcdf59560194281d0f3bf6c3fe0b00e4dc4f0ecc859501c1b8d67a54d9f95dfbcefe99e4b8502f2f9fe94a8998640af9a91535e1aff5863a399cb9901f3d6ddf2028a2983d9c2fda51c2834d9885b211815ab8941f35b11e91cdcb294792c3db7f47d958006ccb0982039ee8d8bd42baa7807acbd0aa9795", @ANYRES32, @ANYRES16=r4, @ANYRES64=r1, @ANYRES64=r4, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYBLOB="7f40a1", @ANYPTR64, @ANYRES32=r2, @ANYRES32=0x0, @ANYPTR, @ANYRES64=r1, @ANYRESDEC=r0, @ANYPTR], @ANYBLOB="671614b19df3fe6ccf333a624d4febd09ff79893ada892695c7c0b6def6f7ac482ac62a85c871590e5ee9a5031e8e4d67482eb1a59a1074bd64e54fb550d4d27fb92bf58cc564e16d53bd73f9bb862f5d36ef9d0db41229d04bd3830c20b612d693f65e230ecefbe56a2fec99bdca15d29b940eae720b1239bb4532b1b51d2ab5bc2e54659d87107d4ec094379fac4347273c6536db58bf13f3e7ab7ff18376e5d27c974704d3502b5a7cbf02fd77e5aaca879fe2ab3b4664919712616438c6472777114", @ANYRES32=r4], @ANYBLOB="b198905bec739d1ec2e09632a57b5e7972ecd7d5b758a7d3f336e444f99a475eec0c0589633500edaf0592bc83cd3fcbd9e14c0a5e113513674c566bb39029af4b6906becc404d0ecb54594ca38a180ad0eb80fd71e5268e3d2b237cfb542e4b092b8f299c2a82ea35cc01bcf3ba", @ANYPTR=&(0x7f0000000c80)=ANY=[@ANYRESDEC=r1]]}, 0xca) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80585414, &(0x7f00000008c0)=""/215) getsockopt$inet_buf(r3, 0x0, 0x200000000000043, &(0x7f0000f39000)=""/30, &(0x7f0000001000)=0x1e) write$P9_RLERROR(r1, &(0x7f0000000040)={0x19, 0x7, 0x2, {0x10, '{)+\'nodevproc%lo'}}, 0x19) 14:56:05 executing program 0: r0 = socket$inet(0x2, 0xfffffffffffffffe, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x7}, 0x388) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) prctl$setmm(0x23, 0x8, &(0x7f0000fff000/0x1000)=nil) shutdown(r0, 0x1) 14:56:05 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x7c2e, 0x4, 0x7, 0x5, 0x2, 0x6, 0x9, 0x1, 0x100000000, 0x100000001}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x60002, 0x0) socketpair$inet(0x2, 0x805, 0x8, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)='0', 0x1}], 0x1, 0x0) 14:56:05 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) close(r0) pipe(&(0x7f0000000140)) recvfrom(r1, &(0x7f0000000000)=""/43, 0x2b, 0x40000002, 0x0, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:56:05 executing program 4: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0xfe9e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/member\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x1ff) sendto$inet6(r2, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726fb187d1324cc240811b25f60c9557a4ac0a7f60afaf7d69af6d1bdc0d0360c819200e77c8abff07fdc3db6f8e64678fe221a49c4825a2114e3a18fec4e356ef0000000000000000000000", 0x200002, 0x0) fchdir(r3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f00000001c0)) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000003c0)={0x2, 0x7fff, 0x9, 0x6, 0x6, 0x2}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 14:56:05 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x276}], 0x200000b3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') write(r0, &(0x7f0000000000), 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)}, 0x0) 14:56:05 executing program 0: io_setup(0x5, &(0x7f00000001c0)=0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000004ffe}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="eae419c5c0b620eb3150c3bd08e55e6a58dd4a9d01c58462421aa973156774176070a5c41fccbc3a3bf634fab2fea0d8072ba3b3739984900c5195b0"], 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000040), 0xffc3a1fa}]) 14:56:05 executing program 3: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, r0+10000000}, 0x1) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace(0x8, r1) 14:56:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xfd, 0xfffffeba) sendto$inet6(r0, &(0x7f00000000c0)="04040000079917f586a021e12cf55b4202938207d9fb3780398d5375000000007929301ee616d543e06590082053c0e385472da7222a2bb42f2dbd94c3b50035060f04000000f55dc62600009b000000ebffffff00000000aeb46245004bae13566424aa", 0x64, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000006, @remote}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000180)={{}, {r2, r3+10000000}}, &(0x7f00000001c0)) 14:56:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000240)={0x4, {0x6, 0x3ff, 0x1, 0x400, 0x4, 0xbc68}}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e21, 0xa7cb, @mcast2, 0x2}, {0xa, 0x4e24, 0x8, @loopback, 0x2}, 0x8, [0x8, 0x0, 0x8001, 0x8, 0x7, 0x6, 0x6, 0x3]}, 0x5c) lseek(r2, 0x0, 0x1) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) rt_sigtimedwait(&(0x7f0000000100)={0x100}, &(0x7f0000000180), &(0x7f0000000200)={0x77359400}, 0x8) close(r1) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000280)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x6788, 0x93b6, 0x6, 0x65, 0x100}) 14:56:05 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu]}, &(0x7f0000000080)='GPL\x00', 0x80, 0xfb, 0xfffffffffffffffe}, 0x46) fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000140)=""/188, 0xbc) 14:56:05 executing program 1: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x2, 0x10000}, {0x6, 0x5}]}, 0x14, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x105d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x2}, [@ldst={0x4, 0x18d1fb, 0x5, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x7) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000280)) getsockopt(r1, 0x20000000000088, 0x1, &(0x7f0000000180)=""/203, &(0x7f0000000040)=0xcb) [ 69.992007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 14:56:05 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = eventfd(0x100) fcntl$dupfd(r0, 0x0, r1) syz_open_pts(0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) shutdown(0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0xc00, 0x129) creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="ddc7000000000000"], 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xc4, r5, 0x14, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x401}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x38}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1fc000000000}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xef}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffffffe1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x1) write(r2, &(0x7f0000000280), 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) write$P9_RGETLOCK(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r6], 0x5) 14:56:05 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180), 0xc) [ 70.047230] audit_printk_skb: 30 callbacks suppressed [ 70.048641] audit: type=1400 audit(1537973765.876:27): avc: denied { prog_run } for pid=4141 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 14:56:05 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f00000003c0)=""/4096, &(0x7f0000000080)=0x1000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000200)={r1, r2/1000+30000}, 0x8) setsockopt(r0, 0x3, 0x8, &(0x7f00000000c0)="7f3e88f888cbaf49b62802efec7aef3cea5f41760bf8a54d8b0a28e3b83b31f465e51db254a4908cb8dfb4fb33030b14429778cf758b738173d3eb0ae13aa48a3c75b65ba54424c86ea25e0d970229dece3a917decc04cc237bc122d4e3442c30087e7ce88962404e339418e1d0dd7c1d717eb6226ea5bea753dd5ef4d259cfc0a2a8a3cedb40ca272f3756ec22590d4f92429d49bcedbde66a62eebc6dda4f41af415004e6a4eaa98e26537ba28e7abec1b26bce0c71f6c55c5f1eb966b100edd31afa1cd1ff4d7eee60f76c1a317359f92cc1c65329e5108fc4fc06d7172d39efd62", 0xe3) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 14:56:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000700)=[@exit_looper], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x0, 0x0, &(0x7f0000000200)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80200, 0x0) write$9p(r1, &(0x7f00000003c0)="cfe15857a17ffadee8af3cbbcbbf6698c6f12f81ca37c80f998702c848587b71e4dfcc8d81e3e3c6bd71396f170433fbaf868f2d31ea325a60b4da4141dd36e34dda9d734dad1c32d802daa857028f0adfac45d6a56382264a9dcef3bf1650d14daa084d9afea026bd5a527d1c25c9882a6fc0dad04533e43b4859655a11bfd8e68c308677f35eea71e3d9427cbd0017dea379237aac968ce5cb77172e578a9d5fa773cb069f087f9c8626be57308cd29bc518225fccb47365b59bd1c25111c048b64f1b17e21ed91c933782c91fb0b8e4b52d55c1adb9ad4c83938fb0eff80d5c682add5d4e45b0e581617025657ce47fc61de52a29f458df", 0xf9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000380)="0e"}) [ 70.155101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 70.234157] binder: 4162:4168 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 70.246873] binder: 4162:4164 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 14:56:06 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="6a7c2e0b3d4c9ba1ad4587cfe46aac2278146c5db3006666d8ac70200a3081ccf7596cfa"], &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x920fd, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) 14:56:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap$binder(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x1000000, 0x11, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x88200) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)=0x0) getgroups(0x1, &(0x7f0000000180)=[0xee01]) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f00000002c0)={0x94, 0x7d, 0x2, {{0x0, 0x72, 0xb7, 0xb, {0x80, 0x3, 0x6}, 0x4000000, 0x7fffffff, 0x6, 0x1, 0xc, 'systemmd5sum', 0x1f, "6d643573756d5cb32c5e6d643573756d6d643573756d6b657972696e67402d", 0xb, 'vmnet0wlan1', 0x9, 'threaded\x00'}, 0xd, 'vboxnet1ppp0-', r3, r4, r5}}, 0x94) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) 14:56:06 executing program 4: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0xfe9e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/member\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x1ff) sendto$inet6(r2, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726fb187d1324cc240811b25f60c9557a4ac0a7f60afaf7d69af6d1bdc0d0360c819200e77c8abff07fdc3db6f8e64678fe221a49c4825a2114e3a18fec4e356ef0000000000000000000000", 0x200002, 0x0) fchdir(r3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f00000001c0)) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000003c0)={0x2, 0x7fff, 0x9, 0x6, 0x6, 0x2}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 14:56:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) r1 = dup3(r0, r0, 0x80000) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, 0xa, 0xef000, 0x31d1, 0xd2, "fee00d66f9fb658a3197f047113e74cbe8bd396b36497c40e0060fd24759c79e53d199e58766322226f53f7458d8b30c5f0e91a4b94e6a7bddb4f08d27aa67a68b514df7b04571fe95993b2a1ecfaea140feeaa234ee4c44c2e3ad18b79b88de6e97967dc98803306ca59468c605182763426a55dbc10f8b27978f332965bfcdf9830dd79d97b8c42511c2f5b2f00a242da1aaa2e9acd5b3d456270dc6e8f4a32186ccf6d47b88277da0ead6cc932d9388409d39403b6e1979c0c46608033ad6174b83ee9d980d3915662f014d9b18c6b962"}, 0xde) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast}, 0x0) listen(r0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) listen(r2, 0x0) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) dup3(r0, r2, 0x0) 14:56:06 executing program 1: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0xfe9e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/member\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x1ff) sendto$inet6(r2, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726fb187d1324cc240811b25f60c9557a4ac0a7f60afaf7d69af6d1bdc0d0360c819200e77c8abff07fdc3db6f8e64678fe221a49c4825a2114e3a18fec4e356ef0000000000000000000000", 0x200002, 0x0) fchdir(r3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f00000001c0)) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000003c0)={0x2, 0x7fff, 0x9, 0x6, 0x6, 0x2}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 14:56:06 executing program 3: r0 = socket(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00') ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000000)="480000001400197f09004b0109048c590a88bfffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e0000000000d5a49b19007a9eace3dbe8b12c000000000000000000", 0x48}], 0x1) 14:56:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfffffffffffffe5e) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) 14:56:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xa000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'team_slave_1\x00', 0x400}) 14:56:06 executing program 5: clone(0x480000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace(0x8, r1) 14:56:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x1a) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x80400000001, 0xb6b0324eb79d0365) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x80000001, 0x4) sendto$inet(r0, &(0x7f0000000240)="e6c6965bb67ce4da258fc7fc5923d2fae2a109d4b58ef5f4c66a381be372d0b095300349c76af11fd28007c91c083e020261fc5ed55695d861a6b6b4965637f368c55a67815f566c5700dd099c5b9cf475d02f4a4f58b9a8cfa294c21a721fcc155b632700fef43aed4e8b4c01b109535d36756e5f92df8ed8bcbf7f0b73b3f78a478f0bbcf8b7916842001d39b12a70b8f97f98dc0305364b221350708913da19acb0f6a6574e514825ad86498813a00d698bac5e0d0141", 0xb8, 0x8000, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x20000, 0x0) sendto$inet(r0, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) write$P9_RWALK(r0, &(0x7f0000000100)={0x16, 0x6f, 0x1, {0x1, [{0x8a, 0x3, 0x8}]}}, 0x16) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x14) 14:56:06 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setscheduler(r0, 0x8000000000000000, &(0x7f0000000180)=0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_ts_info}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000140)) 14:56:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)) 14:56:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x8, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x2, 0x4) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0x16}, 0x2000) r3 = dup3(r1, r0, 0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0) 14:56:06 executing program 2: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x81, 0x1000, 0x3ff}) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000004489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") io_setup(0x100000000000e770, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000a80)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000240), 0x28e, 0xffc000000000000, 0x0, 0x0, 0xffffffffffffff9c}]) munlockall() sendmsg(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@generic={0x5, "34b0ed35233a25599112a964e804431bc08311fa162594ac395f1be56dcfdbe791624190884392eadc608a683abe4494ac877172b69d2450d3edadd9618aa16131db1cfdcfd64f9f07b43a945d034279132d10d0309250d27b1b1d7dfb7e18b1a45f8edac1dfca646c0f441009e4da2acdaa82df53b6e1b73f502dc7eac0"}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)="5e86e16b99e266feb57eb1b5dc1d357e4358fd05a6f9ab7184b8b1a61e95fbff618f679c373ebfdd778034a3aeb31476ffff131779ed91bcb79d0f36a8327514e3fff7d2f5145451fa4e3fab81a9343de6b787092426924f606a0b8da22970c77dfca1ddeb75e867bd7e6648df31cec0565178edfe2977ad25516cb4714b81bda4af97909bf81c368a7678ac9b2b763f0a43fafbfd707d75d04e44efb95896735f20b2229fd6c49b08997a724eda07d004b519188c0e05342536159cab3bdb72374f5a923e44e9eefb44af3539439713d625b7823cba2e711b", 0xd9}, {&(0x7f0000000180)="983f0518a63b40a12d032bbcea9cef560798b3d5507ed91569f6392baa43a735e3261d6bf051c68a7fb4a2617ba09dc71a8e1c8ad461025bf7a15736feffafdf6445f0d0c738a62c2752dec7a99472e1df1eb48a7e00e5f3a970bd32bd20fd0788193043813c4caeb02632198b9b07bc", 0x70}, {&(0x7f0000000240)="e17296ff5d39cec0c471047fc1787802a13832f2017b8e87808f242b81c3bec84c0136b5a015d0649dec1776f15a664553e331e0063d44d51c170e6d9400a2764583823fc5c8", 0x46}, {&(0x7f0000000440)="e5aa3f422ddddd2bba002589167d5a5b0edc7d997476f4596fb1cfb254abeefedd880b0ae2009a561f13e508fdbc4697551770a40b3b9156c704ebccc7a646c942a4fca26aea30cd36104b10134f6492591f9f98301b50ff2eccd0ecda8c1f102aba78d7e769d9445e9310c3f1ca81a16668873ce26a978f218d75175e6d627cc20641fef9f6ab195aabb0a263acdcec94024228f39156c1005a8878a8426f5cc327ad24853fad8f4c5dcb4960b8b5ce3ca1fb27d5329b1096381e03ed0154fa044bafe6b50ffa", 0xc7}, {&(0x7f0000000540)="029940a0cc754322b95bdeadf746f9353799fb26000c3840ca4917bfbd29dc69d3edded4aedb1e21ba25a56fdc4452f64859f3cf008cba274516c775b759457a5535da1c8b98152556c0eb611ac4e342094ab0a9", 0x54}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="2000000003010000980c0000ab7d43d1ea3cb1c1f0a79800e33174696be80000940000000f01000004000000c4e4dcd140bb5197cde12a3b10310c498090c435e19e0e58f0c68faf20e1ef70c39f2828aaa42cc6b2ef39defa77ab9cd2f7ffa7d77b053377beddcfdf7c20b45b475b5ec0723b7b429009813f112ded5c921df7471172da68f8a9fdfd40fbb67cd3ff5af8b37eb4bc3914fd0d2573354099e45f11e4d7de4ef29d8c615dc29eb79062cf9aa11300a40000000e010000ffff0000d7cb75f2021ea1cf7ebe7e9f625febd9eea9a1aa22aa68cc4a3c2ac15d7c5e9c076bfc1b29423ed5b25e819fa5f98026e88c28c2e39e370d5729f045d88e039be1fc9d94e6ce39ed0353f6d54385d937295cdef19b2dde8b3140a90bb1a48c8cdaffc3f4342b518104a421879e3e280791817a5656cc8365d27bb844245ec163abc27c7ffd7e74ab0ce53b35bb22c6dbecd2125e3782cf00b80000009f0100000800000059198e54be481f106e0914a5d4ca48e85aa2119e02bc14a666725d40928b21413cc1247716e6a9a2f6b9f8d8cacd2dd6439be42915718a651d967e73901de964ffc13b4ac79920ba49e682bf19d774200b190c25d6dca00cc020ecf479b70c13a518846bceb71bf5aff7907e1807180aa15b35b1d14ecea8e9155b969af50bbd34136a430df743ff74dae549979fa293fad420edd7d8a999ae31d5007df2df182fd011241e56f0c57c000000b800000000010000ac8300003bb2ed9bb50daa7cf990793a67f9217d19d99b2dc5579b6ae1920d28944ba8c06c1d423abf18f50d79fe7a4cfcc1e8d240e8df8f6fef2745806bcb9396b2ec7b7efa660e57760ff1abbb802d5d1b4882a0eac1883dedf1f1c3b21ec28577168a290e9d663f19036a510dcc377452595354e28790ae6e719ed5a2d200f60615243f9969856918b9b93ef0756bc38ece42373d55577478eb3cbabc5cfe6812c5cdcc987827b6623b398b000000d80000001301000007000000a22c05a7a469a5c30fcb7c409183ee59f58dbf13be94dea0b62e644f038be1fe1268bb0d2a4b5718727b27e4d692f2126646a7593d5a235da4bb8eeba21e6c48ffb9292dec1ab0069c861721759194faefb39ceb8d5a189a83e50bbf53a37e37d7dfcf07f8572c81a664154abf58ae4e8c47f6406461b8f6b4bc0e8c5ea32b9a64af5dcd9c7d895b489956cea079d6e3e266c56ad059a3f5ef74a387a95c85974e0082c19637475b2d200f7caef16cc52d5f759030ecb9af4300cd6d57ad7470e1f75e28c8127078fa000000a8000000120100002aa300007dbfd308644da60e7f8a84ca084dfd59a1137075447d51ff899ab065586be613d5eb53275be5de3aa18ccc8a2c8322e57279057a89acb8be55fb0a35b727e9e012ca3b26b225e3883ce731bf5becea012fc2cacb9fefb521216071a385a5722a0c92623a15489e1f7874d1801d1c7a49742f827a972ef8633f583c79713641923234716a3d32162489257807bbb4f52fb64e4c5433da673cb8d9ce00"], 0x448, 0x8000}, 0x1) 14:56:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) fcntl$getflags(r0, 0x408) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001300)='/dev/uhid\x00', 0x1004000002802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, 'syz0\x00', "73797a30000000000000000000000000000000000000000000000000000000000000000cf6b309b545465800ed03b431688e00", 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}, 0x119) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) write$UHID_INPUT2(r1, &(0x7f0000001340)=ANY=[@ANYBLOB="0c0000ffff007a"], 0x7) 14:56:07 executing program 0: r0 = gettid() exit(0x0) prlimit64(r0, 0x0, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000280)) 14:56:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x806, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x400001) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x3, 0xfffffffffffffff8, 0x0, 0x7}, 'syz0\x00', 0x1000000001}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) 14:56:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000440)=0xc) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000000240)=""/61, 0x3d}], 0x4, &(0x7f0000000340)=""/87, 0x57, 0x7fff}, 0x40002140) 14:56:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0xfd74) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000000)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000006c0)="f948604d304fb76c7c5aad3327425acc6fb8c5193b32b3a0ea6076532dcb1b8b861311a4898e01adc1efc60cf189a6956b8dd9e1b179c47342630233f1e76c2fc5904e02f47ccb79e50999498d6f9d166a376cf77ec48e559255aa2fda44c2a3ea2865434c0ba87808fe8afbf4c9d99af85eaf0fba00c169fc4fcdb0608b76037a644f20f89543fd19107d26ac0de31eacf4859dc855e4b82e32cda792df97a4612abbaef9dfe38d69afeb1976486aedef4223c523b78b71d678222570c4753649211f93203d4f2045e2e324610c5e3c90bf72cfc90f4a8bfb1d1d71da6da8e6bc69f96ccb101b3060fedf2dd19e6cbdd6887b28510447b91f79ef392e5af673") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) rt_tgsigqueueinfo(r2, r3, 0x40, &(0x7f0000000280)={0x1a, 0x6, 0x8000, 0x2294f649}) timer_create(0x2, &(0x7f0000000180)={0x0, 0x2, 0x1}, &(0x7f00000001c0)=0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x9, 0x0, [], [{0x80000, 0x5ca7, 0x7, 0x3, 0x8f3c, 0x3f7}, {0xbe50, 0x7fff, 0x7, 0x0, 0x4, 0x43}], [[], [], [], [], [], [], [], [], []]}) timer_delete(r4) 14:56:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x11, &(0x7f00000024c0)={0x2, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) r2 = dup3(r0, r1, 0x80000) ioctl$KDMKTONE(r2, 0x4b30, 0x9) [ 71.739679] input: syz1 as /devices/virtual/input/input8 [ 71.765266] input: syz1 as /devices/virtual/input/input9 14:56:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}, 0x3}, 0x1c) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @dev={[], 0x16}}, 0x10, {0x2, 0x0, @multicast1}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x480002, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0xa, 0x1) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x40000, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@context={'context', 0x3d, 'user_u'}}]}}) 14:56:07 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @local}, &(0x7f0000000400)=0xc) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81002}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newneigh={0x40, 0x1c, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x9, 0x86, 0x7}, [@NDA_PROBES={0x8, 0x4, 0x6}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffd04) 14:56:07 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7040000000000006a0a00fe00000000850000001a000000b700000000000000950000000000000030b861295d0d8cb5443c4cbb071d2ab2a7ee96b3dd38409654012b5332fc057538dc71e7a9145bcc0c670d4dd1dcee5cab8680e1204cfedc26f4c5a4df9d1e8d7c2e707e6918827413fe2370d7be8afc05b4d0bdd71d110250216161b400409a51f01df5"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xfffffffffffffffe}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$LOOP_CLR_FD(r2, 0x4c01) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000280)={0x5, {{0x2, 0x4e22, @multicast1}}}, 0x84) 14:56:07 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x2000000000) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x23800, &(0x7f0000000140)=ANY=[]) fcntl$setstatus(r0, 0x4, 0x6c00) quotactl(0x0, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x80, 0x4) 14:56:07 executing program 1: socketpair$inet(0x2, 0x6, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000340)=0x6, 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000600)=""/219, 0xdb}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 14:56:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x11, &(0x7f00000024c0)={0x3, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0xba) ustat(0xffff, &(0x7f0000000000)) [ 71.842556] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 14:56:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) fcntl$getflags(r0, 0x408) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001300)='/dev/uhid\x00', 0x1004000002802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, 'syz0\x00', "73797a30000000000000000000000000000000000000000000000000000000000000000cf6b309b545465800ed03b431688e00", 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}, 0x119) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) write$UHID_INPUT2(r1, &(0x7f0000001340)=ANY=[@ANYBLOB="0c0000ffff007a"], 0x7) [ 71.986439] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 14:56:08 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000880)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x10, &(0x7f0000000980)) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='g', 0x1}], 0x1) 14:56:08 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000180)) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x400001081f8) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x8a75) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000140)={0x9, 0x0, 0x8e, &(0x7f0000000040)="483c68d0ff65b1b1420aa07e1098a76ed455f1dac8a8dfe0be561e0ef2b36adfd2373d8c4a3a778abf480ae247a3f7f553022a8d330e6f60d8402bc27efc2fe5c0d9b7e5ac19aee80715b2dc76caba5f8097ae01ca09a78884c96807a7d906f90b39f44e5b0f04f953bd7ff597e04510f33f12463f5225351e4e6ec4fc42a769fcd2bd0eecc7dfa854bb53dc1e6e"}) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 14:56:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)=""/39, 0x27) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000100)=""/81, 0x51, 0x12040, &(0x7f0000000600)={0x11, 0xd, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:56:08 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000480)="ec311d05e13a5f7072a3990765a97a95a201b726be2285c9b839a99ae46455c612c668e3459b5fb320c1557d957b831958c03863b535e8a8c0caf6f809110b7e9e8c6cf6b15a1ed600116980d9f9479de8711b5efd0bd681e2ca70cc9548b550b9b8847a751d2730a343122107c548abf906efa3443d3f0b3eb75b737c141b4dffcd4ceb4338aa44b6042e3d29f8744d83ce78c1212991d3db0b106dab76971b92aff03c859ed3df276308a4ac71e0c064158dd74e8575ceb8454921122d9eed90fdda1e84c5b14204efe651e10249e7deb8a421833044350a85647fd8f29a96c9a417e59e9015d8", 0xe8, 0xfffffffffffffffd) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0xfffffffffffffff5, 0x3, {0x7, 0x1b, 0x5d1, 0x200, 0x8, 0x800, 0x1, 0x745}}, 0x50) keyctl$assume_authority(0x10, r1) mount$fuseblk(&(0x7f0000000200)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303030303030306ddab5125f3e29b8643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=rootmode,fscontext=sysadm_u,seclabel,smackfsroot=eth0,smackfsfloor=fuseblk\x00,smackfsdef=.\'em0lowlan0security,\x00']) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r2) 14:56:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001280)='/dev/full\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58114347b289546465a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00000000000000000000000000000000", 0x82, 0x1, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000002480)=""/112, 0x70}}], 0x1, 0x0, &(0x7f0000001240)={0x0, 0x989680}) fsync(r1) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) sendto$inet(r0, &(0x7f0000001100)="116c90855c9c1c6640290ecec8847d148c0c37644712a00e1cb4f4247a2c75cdc72d8df51216dc050540268d0084a843aa4cfa1c8823086d0e578fa17a0cd3f38fef643d1e217adb8dc76d4258951a463fbce748dd633cf2d09e160b8f9de530ec77e6a2fabba49b6053b937645711a6e7599dccac2f96b7c9f10791d3368b91fa55", 0x82, 0x0, &(0x7f00000011c0), 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000013c0)={'ipddp0\x00', 0x7}) recvfrom(r0, &(0x7f0000000040)=""/4096, 0xfffffffffffffff7, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001400)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000001200)) r2 = gettid() tkill(r2, 0x16) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000012c0)={0x6, 0x0, 0x7, 0x0, 0x0, [{r0, 0x0, 0x2}, {r1, 0x0, 0x3ff}, {r1, 0x0, 0x9}, {r1, 0x0, 0x7c6f}, {r0, 0x0, 0x3}, {r0, 0x0, 0x81}, {r0, 0x0, 0x6}]}) 14:56:08 executing program 4: unlink(&(0x7f00000000c0)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') write$input_event(r1, &(0x7f0000000140)={{0x0, 0x7530}, 0x15, 0x4, 0x5}, 0x10) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$evdev(r2, &(0x7f0000000080)=[{{0x77359400}, 0x4, 0x8001, 0x7fffffff}], 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="3421000020000100000000e700000000023400000000041000000000010000000000000000000080080000040000"], 0x34}}, 0x0) 14:56:08 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x21) unlink(&(0x7f0000000040)='./file0\x00') mount(&(0x7f0000000180)=ANY=[@ANYBLOB="4c5b5bb1382b3528fb9cefc5e733582d30c431f9d69fe43763e1a39bf2c58eac34a28ef877efa2328c79cf4e0fe1a6449daab88d55ddf00cb864cdea30832a8cfb205e586a0c3d30132802770ff8117961c4e4ccc23132bc4fa097ae18ae17c1b8ed03575da219e595b03cdf4dc6ae5e7364e6c5ba7df4e4ed2166"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='vfat\x00', 0x41800, &(0x7f0000000000)='\x00') 14:56:08 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='auxv\x00') setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0xff, @rand_addr=0xfde, 0x4e20, 0x3, 'lc\x00', 0x8, 0x81, 0x4}, 0x2c) exit(0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000001700)='fd/3\x00') ioctl$RTC_VL_CLR(r2, 0x7014) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000040)={0x2b, @rand_addr=0x3, 0x4e22, 0x4, 'none\x00', 0x1d, 0x10, 0x76}, 0x2c) 14:56:08 executing program 5: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$setopts(0x4200, r0, 0x176d, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() fchown(r1, r3, r4) dup2(r1, r2) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)='syzkaller1\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000001c, 0x0) 14:56:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000040030000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000200000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xb0}}, 0x0) [ 72.553625] audit: type=1400 audit(1537973768.386:28): avc: denied { net_bind_service } for pid=4307 comm="syz-executor1" capability=10 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 14:56:08 executing program 0: r0 = socket(0x10, 0x0, 0x20000000000000) r1 = dup(r0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x8, 0x100, 0x81, 0xa, 0x1, 0x401}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfffffffffffffdc9) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x8, 0xabf, 0x400, 0xfffffffffffffffc, 0x81, 0xd05}) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) setreuid(0x0, r2) 14:56:08 executing program 5: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$setopts(0x4200, r0, 0x176d, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() fchown(r1, r3, r4) dup2(r1, r2) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)='syzkaller1\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000001c, 0x0) 14:56:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x600) chmod(&(0x7f0000000000)='.', 0x5398fffb08fec7ed) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 14:56:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x800005, 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0xeb, 0x20, 0x1, 0x0, 0x0, [{r0, 0x0, 0x101}]}) listen(r0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) 14:56:08 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x4864d689) r1 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000280)=@ethtool_regs}) 14:56:08 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000140)=0x3) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f666b6cfe29ca1e97026e88b6cdbcfb47df45680f963809e0"], 0x3e9) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#user'}, {0x20, '[vboxnet0eth1user'}, {0x20, 'keyringwlan1cgroup}(:\''}, {0x20, '\x00'}, {0x20, '#'}, {0x20, 'bdev[#'}], 0xa, "b05c7abab2de843a657fc92b0d888760821bb16ba3f61982cc3d869a09"}, 0x62) r1 = getpid() write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xffff, 0x101, 0xdc2, 0x8, 0xfffffffffffffff9, 0x2, 0x6, 0xffffffffffffffce, 0x7e, 0x40, 0x320, 0x7, 0x66, 0x38, 0x2, 0x40, 0xbb2b, 0x4}, [{0x70000003, 0x7, 0xdfed, 0x3f, 0xba2f, 0x35, 0xffffffffffff7fff, 0xfff}, {0x7474e557, 0x4, 0xc0000, 0x7, 0x2734, 0x4b, 0x3, 0xd672}], "ee76a8f8c5df4c28c122170365bba4a1a553431f55a7b47bf589d80079d036c90d64bc19132f17212f", [[]]}, 0x1d9) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000440)=0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x3, 0xfffffffffffffffc, 0xffffffffffff7ae0, 0x7, r1}) 14:56:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000100)={0x9beb, 0xf40, 0x10000, 0x8}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x5, 0x5, 0x100, 0x4, 0x8000, 0xe5, 0x1, 0x5821, 0x50, 0x7ff, 0xfa0, 0x3}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/232, &(0x7f0000000180)=0xe8) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}]}) 14:56:08 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000140), 0x8) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000040)=""/142) 14:56:08 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000140)=0x3) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f666b6cfe29ca1e97026e88b6cdbcfb47df45680f963809e0"], 0x3e9) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#user'}, {0x20, '[vboxnet0eth1user'}, {0x20, 'keyringwlan1cgroup}(:\''}, {0x20, '\x00'}, {0x20, '#'}, {0x20, 'bdev[#'}], 0xa, "b05c7abab2de843a657fc92b0d888760821bb16ba3f61982cc3d869a09"}, 0x62) r1 = getpid() write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xffff, 0x101, 0xdc2, 0x8, 0xfffffffffffffff9, 0x2, 0x6, 0xffffffffffffffce, 0x7e, 0x40, 0x320, 0x7, 0x66, 0x38, 0x2, 0x40, 0xbb2b, 0x4}, [{0x70000003, 0x7, 0xdfed, 0x3f, 0xba2f, 0x35, 0xffffffffffff7fff, 0xfff}, {0x7474e557, 0x4, 0xc0000, 0x7, 0x2734, 0x4b, 0x3, 0xd672}], "ee76a8f8c5df4c28c122170365bba4a1a553431f55a7b47bf589d80079d036c90d64bc19132f17212f", [[]]}, 0x1d9) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000440)=0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x3, 0xfffffffffffffffc, 0xffffffffffff7ae0, 0x7, r1}) 14:56:09 executing program 4: r0 = socket$inet(0x2, 0x0, 0x2001000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/141) write(r1, &(0x7f0000411000)="bc", 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[]], 0x4) setrlimit(0x0, &(0x7f0000000000)={0x6f, 0x2}) 14:56:09 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="636dfa50c2a99cfe12f6bc006359"], 0xc}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000100)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) 14:56:09 executing program 2: r0 = memfd_create(&(0x7f0000000080)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xfffffffffffffe58) ioctl$RTC_WIE_OFF(r0, 0x7010) fcntl$addseals(r0, 0x409, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x50, &(0x7f0000000380)}, 0x10) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='rose0\x00', &(0x7f0000000180)='rose0\x00', &(0x7f00000001c0)='rose0\x00', &(0x7f0000000200)='rose0\x00'], &(0x7f0000000340)=[&(0x7f0000000280)='rose0\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='!\x00']) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x4, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23}, {0x2, 0x4e20, @loopback}, 0x11, 0x0, 0x4, 0x3, 0x80000001, &(0x7f0000000000)='rose0\x00', 0xd58, 0x57, 0x6}) 14:56:09 executing program 0: futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x2, &(0x7f0000c87000/0x2000)=nil) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffeffffffff, 0x1f, 0x7ad, 0x8, 0xffffffffffffff80, 0x3, 0x3e, 0x0, 0x273, 0x40, 0x80, 0x8, 0x81, 0x38, 0x1, 0x1, 0x0, 0x1f}, [{0x6474e557, 0x0, 0x100, 0x400, 0x80, 0x100, 0x2f5, 0x2ce}], "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", [[], [], [], []]}, 0x1478) 14:56:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) close(r0) 14:56:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000180)="04010800008b00ddb8460900fffb1d7ee2edbd61d6033781398d5375a41640938029ef0712f295136f8f6575eb353c72e475f7fd54482c03ac4db09698c0e2d2000000000000fffba334917c4d7e459959e78aa4da493f43c8808dfa0e3607d271934149ac5b82260b03b78dc75c2db8c7d8139a658e79c5ab318a62f19502d699ddd65346bb67f0844f6ef68dc86900000000000000", 0x96, 0x20000000, &(0x7f0000000000)={0xa, 0x200010800, 0x6, @mcast2, 0x100002}, 0x1c) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='hybla\x00', 0x6) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, &(0x7f0000000100)=""/51, 0x33) 14:56:09 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(&(0x7f0000000940)='/dev/loop#\x00', 0x28, 0x80901) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x10) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000400)=""/217, 0xd9}], 0x2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30011, r2, 0x0) r4 = request_key(&(0x7f0000000780)='.request_key_auth\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000800)='posix_acl_accessppp0\x00', 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000740)=[{&(0x7f0000000280)="b7c4d11ec46981eb8d865850a30fc40494a07b198d206734b92594d65bb33afe6c8e64c291f7b80b4b313b77519e3202ad7a04b0fd2c5c1eaf3071395435c0146f86a9", 0x43}, {&(0x7f0000000500)="20fe61caf84a680b7352bcfbcb7afdc0eddbc6e6687d6460b79c4a466d6d26e5c667d1fe1eba4a4ce2b7d1be06c5f3a37169e748ab0ef2acf73c8a20518f89a11620e315c59e2ec62b5718b4ee1b134d9d0b8237661cd00bf4164677c4a14a942a36e2b8672fbd65d8de4a73895d293bd6e46abda9a9530d", 0x78}, {&(0x7f0000000580)="ac611da01264abced7570b1798c81ea1bccd42f0d70ae6fea7df5fff3c4254adddca7192c95023a1e40ec143685fd68256c17b0730c958d9963cc84205f36ab57ade2e63f534e9d9657d08c474547ea4c7b3b1186d53a39f457bf73be06af6e0cf5e99271967dd4034ddcadbcbd2bd529fe0cd847598a71df92d9efb548578221f87cecc", 0x84}, {&(0x7f0000000640)="cda501def6da83601b5f6d959d21344191b713b3065f6a9b620f4ef1fb01b2af06b555eb9a5deb0aa19c65c18c2aca4e28b3aebb35263b3a35b804f978776e3d85598b1a6623d5e3866d19085a0b6c6596142410d91dcdf13aeaf1e312f50b726881fd3a6676a5e165dc9d98fe318b2f0c001a42f616398b0e8e84625ec68dd6da28f79d1c1522e1cce293bf219feeb328c20c1746ca6c40cdb190638488dd2c32cd771d072a3e806e0b71596d8a", 0xae}, {&(0x7f0000000700)="831ea4206091a9ce0ca4f1417eef106b67579bb6a804", 0x16}], 0x5, r4) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000840)=""/93) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, "6c64d5983c21f338fe16ac8e3805383c28930e33344da1d47664266c3e9ad9fe364f2840ab3278048438db1f5ee4fc54a965b06b9ad31cd7a169b85edf32af27", "41f28a90ae16987d52e43c84bb37c1169c3a9c1eac5772e50bd23aea8e827e7a", [0x0, 0x1]}) 14:56:09 executing program 3: r0 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) getpid() keyctl$update(0x2, r0, 0x0, 0xfffffffffffffedd) 14:56:09 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = syz_open_pts(0xffffffffffffff9c, 0x141040) ioctl$TIOCCONS(r2, 0x541d) 14:56:09 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r2 = creat(&(0x7f0000000000)='./bus\x00', 0xfffffc) pwritev(r2, &(0x7f0000002640)=[{&(0x7f0000000640)}], 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) fcntl$setstatus(r1, 0x4, 0x6100) sendfile(r2, r1, &(0x7f0000000080), 0xfffffffffffffffc) getsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:56:09 executing program 1: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000001c0)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100)='#.@\x00'}, 0x30) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x4a0100, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000004c0)) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000080)={0x80000000000007, 0x40000044f}) r2 = getpid() clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) alarm(0x0) sched_setscheduler(r2, 0x5, &(0x7f00000003c0)) setsockopt$inet6_buf(r0, 0x29, 0x80000000000043, &(0x7f0000000080), 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x28040, 0x58) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000380)={0x8, 0x5d}) 14:56:09 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00441000", @ANYRES16=r1, @ANYBLOB="00082abd7000fcdbdf250900000008000600020000000800060001f1ffff0c000100080001000a00000008000500030000006800030014000200766c616e3000000000000000000000000800030003000000080008003f0000001400020076657468305f746f5f626f6e6400000008000800050000000800080000000000080004000700000014000600fe8000000000000000000000000000bb08000500000000001400020008000b0002000000080003000300000018000300140002007465616d5f736c6176655f31000000001d25af061b6a64a31b9c745adedd1f00f06ea1f999aff44ffeb656611e314023585cee75ae18e6ff1c16d8272dbb42f37a7da396607a7f715e7d2ecb544de6ca2a921de74e860262e4ae8222cbab46281533635684fc69fbb3ebc934c7d8eb82e2b3a3d2db6598ec99b6a80065e76be83444f4cd64d11d82094d0791bf53a754d12009164d98928726"], 0xd4}, 0x1, 0x0, 0x0, 0x4001}, 0x4008080) r2 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r2, &(0x7f00000001c0)) r3 = socket(0x10, 0x2, 0x0) socket(0x7, 0x200000000000000c, 0x1) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, &(0x7f0000000000), 0x800000080000002) [ 73.915542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12849 sclass=netlink_route_socket pig=4431 comm=syz-executor2 14:56:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x3}, 0x10) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x4e20}}}, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x307000, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000480)) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x200, 0x4) r3 = request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)='md5sum^keyringtem1\x00', 0xfffffffffffffff9) keyctl$update(0x2, r3, &(0x7f0000000280)="3f1e872dca5e9cb21fed36e19b63538ce58bd9178d3683cfdb384e02974136835ee9672dbf635caecbbf80b11e883694c02712738a1f4224c18d22f8cc0486d9250f1830d6e2f41060edda7edc73c423daa3c358b86dc04b85c2525455235697b780b36ef457b82e6387d8c767437b46f4b9e8a978624f0decee06e0663a196585e6bfc1890c8647a2e4315efaef68a80edaf6c1aae674f1d90b0ad13d6b92b06c1ae9ce1cdf7013767e548eb33fa9019cd26b328ac64bd3187d054ffeff5d6cee090db96473344a8ea0480d51800681c1f166699180a4078db552d1bd09be1fd93bb80a29edb6d6bd23a6", 0xeb) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x60) 14:56:10 executing program 3: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x1, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22}, {0x2, 0x4e24, @multicast2}, 0x4, 0x3, 0x9, 0x4, 0x100000000, &(0x7f00000000c0)='ip6gre0\x00', 0x2, 0x20, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="60036f3540f4cdd70ff3799de65f7d38cbff848a11531e9a5ac6039fb9f9144b7b3a3c64c265bfbf15bfd2533ac945030ca14fbeb8240bf5c755ac49f6b2194e6e6cc7b53088c44cf2a460b0424aa0481a5ea05b28857eabc895b931a8150d2e1e75c1bc4b41ff2cd71002033bfae5bcb216c2d14343b7d10ad72711d79a77f0fab4a162f15d055f94b3601fe6b9911b8ff4efe607ba85bec047fe0d4a1cedd27cf7c2ab7e597e874c3cc3bdefc9db6ead19c5d6", 0xb4, 0x0) 14:56:10 executing program 1: unshare(0x40000000200) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x8) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000000c0)='\'vmnet0-proc-]&@^\x00', &(0x7f0000000100)='+\x00', &(0x7f0000000140)='stack\x00', &(0x7f0000000180)='stack\x00', &(0x7f00000001c0)='stack\x00'], &(0x7f00000002c0)=[&(0x7f0000000280)='@vboxnet1vmnet0cgroupwlan0securityem1selinux#)\x00']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='stack\x00') sendfile(r0, r0, &(0x7f0000000440), 0x4000000000200) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000300)) open(&(0x7f0000000000)='./file0\x00', 0x401, 0x0) 14:56:10 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) write$FUSE_LK(r0, &(0x7f00000001c0)={0x28, 0x0, 0x4, {{0x5, 0x0, 0x1, r1}}}, 0x28) r2 = getpid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000a}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="600400002100000025bd7000fcdbdf251300000008002700e0000002e9aab0089028a695719a57b21aa79191354e799bf412cff3696dcb44f509fc8621752b3e72ab1912d53aca8f3702ec84e2098037e611bd277055234a6c5184e470f177abc7b1ca334a130e2b6d11384c4485597fafa02ab96fe2b764abfce5133dd07a1c65fbb26597057c8cefd74abea66b0bf07d722859e0751c1a8d5e9f7e238bf93fa290bcf0ed435c23e30695fa315b4b57f6445c4091948054a274e32e4b09b823fbd407c39c1b2bfc6d0391d5bcb775bf22098cae21763a9c04014b000400590008003300", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="407f3aceb64667f6aa02310c488300ee9f797b50b5ea8a67730873dce977446be068b17159ece7ed72a088276e72e2969fdab7a5db985ef11544e3bf08000600", @ANYRES32=r0, @ANYBLOB="0400670000000008008100ac1414aa08008c00", @ANYRES32=r4, @ANYBLOB='\b\x00+\x00', @ANYRES32=r0, @ANYBLOB="3800110004001c0028004a000a77e85257b8d74b1dcc0bbf8e1682c409e2b0a86a885ac47660d71f5b18929c698c000008002100", @ANYRES32=r0], 0x460}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000044) pipe2(&(0x7f00000000c0), 0x80800) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x800004}, 0xc) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) prctl$intptr(0x80000000000021, 0x1fa) ioctl$sock_ifreq(r0, 0x89bf, &(0x7f0000000200)={'ip6_vti0\x00', @ifru_addrs=@l2={0x1f, 0x2f, {0x100, 0x1f, 0x4, 0x75b, 0x6, 0x80000001}, 0x1}}) 14:56:10 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) clone(0x2120001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in6=@ipv4={[], [], @local}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) write$binfmt_misc(r0, &(0x7f0000000280)={'syz0', "00df3993802ff62188ff582760ff355fe37fe9b2f0326de542751e026d3e143c881e1d2da49203c561e83c446e841858883f7359e1bb1acd3d445da8bad7b257b5188da9b62d9dd2f382f7ef4b79aa59cda0c4073a7a4b9350f4783b81347236c593bcd5"}, 0x68) ftruncate(0xffffffffffffffff, 0x40001) r2 = dup(r0) write$P9_RLCREATE(r2, &(0x7f0000000300)={0x18, 0xf, 0x1, {{0x80, 0x0, 0x5}, 0x82a}}, 0x18) 14:56:10 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0xd) fcntl$setstatus(r0, 0x4, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 14:56:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x12011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c6370e69edf98000006630440010000000c630000056304400200000003630840969e51c2ab0843e243972dc144ce997750f57940769fb265677c7191aef778d4e26c51ec540fad012654dfe04b083c083518c26fd589b9d38753a4d7c5a053b6bc9b85444265ec86e7d2983cf760f155afd787afbc99be8628b48c8c93d6ee4813c010dce6f18bca1302c34e0fccef730db5ceaaa19d0c1ff7d71a1b26cb28cd9d", @ANYRES64=r2, @ANYBLOB="076304400000"], 0x1c, 0x0, &(0x7f00000000c0)="7bc45875c36fb3f6a0c4b760d980f000521d7a2eb0dcdcf6e5664c4f"}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x8) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) r4 = dup3(r0, r0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3c}) 14:56:10 executing program 0: r0 = socket$packet(0x11, 0x40000000000a, 0x300) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x10000000000006, 0x0, 0x0, 0xe362}]}, 0x10) r3 = socket$inet6(0xa, 0x400000000001, 0xc) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 14:56:10 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='lo\x00\x00\x00\x00\x00!\x00', 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r0, 0x5, 0x3}, 0x14) r1 = socket$inet6(0xa, 0x1, 0x0) clone(0x210007f7, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x00!\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x3b}}) 14:56:10 executing program 4: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) flistxattr(r0, &(0x7f0000000100)=""/195, 0xc3) write$selinux_create(r0, &(0x7f0000000080)=@objname={'system_u:object_r:initrc_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x0, 0x20, './file0\x00'}, 0x5e) 14:56:10 executing program 2: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000016ff8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r1, &(0x7f0000012ff6)='./control\x00') renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) 14:56:10 executing program 4: socketpair(0x9, 0x3, 0x8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x4) write$UHID_CREATE(r1, &(0x7f0000000580)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000004c0)=""/137, 0x89, 0x0, 0x0, 0xfffffffffffffffd}, 0x11c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000), 0xfffffe63) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r6 = dup3(r0, r4, 0x80000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r7 = getpid() read(r2, &(0x7f00000006c0)=""/182, 0xb6) capset(&(0x7f00000001c0)={0x20080522, r7}, &(0x7f0000000200)={0x2, 0x6, 0x12, 0x20080000, 0x9}) ioctl$TIOCSBRK(r4, 0x5427) lstat(0x0, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000080)=0x100000000001, 0x2e6) sched_setscheduler(r7, 0x5, &(0x7f0000000000)) execveat(r5, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 14:56:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x1f07, 0x6, 0x6, 0x9}, 'syz1\x00', 0x4e}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4231d52d, 0x0) dup2(r1, r0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)) 14:56:10 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$packet(0x11, 0x400000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x11, 0x4) sendto$inet6(r0, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x100200000800}, 0x1c) recvmmsg(r0, &(0x7f0000005740)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/52, 0x34}}], 0x1, 0x0, &(0x7f0000005880)={0x0, 0x1c9c380}) [ 74.492962] input: syz1 as /devices/virtual/input/input10 [ 74.523033] input: syz1 as /devices/virtual/input/input11 [ 75.138840] ================================================================== [ 75.146234] BUG: KASAN: out-of-bounds in __unwind_start+0x368/0x3b0 [ 75.152614] Read of size 8 at addr ffff8801c50a7808 by task syz-executor1/4470 [ 75.159949] [ 75.161593] CPU: 1 PID: 4470 Comm: syz-executor1 Not tainted 4.9.129+ #47 [ 75.168490] ffff8801c6c0f148 ffffffff81b2bbb9 ffffea00071429c0 ffff8801c50a7808 [ 75.176512] 0000000000000000 ffff8801c50a7810 ffff8801c7bb2f80 ffff8801c6c0f180 [ 75.184528] ffffffff8150072d ffff8801c50a7808 0000000000000008 0000000000000000 [ 75.192542] Call Trace: [ 75.195119] [] dump_stack+0xc1/0x128 [ 75.200463] [] print_address_description+0x6c/0x234 [ 75.207117] [] kasan_report.cold.6+0x242/0x2fe [ 75.213337] [] ? __unwind_start+0x368/0x3b0 [ 75.219284] [] __asan_report_load8_noabort+0x14/0x20 [ 75.226020] [] __unwind_start+0x368/0x3b0 [ 75.231801] [] ? ptrace_may_access+0x24/0x50 [ 75.237846] [] __save_stack_trace+0x59/0xf0 [ 75.243796] [] save_stack_trace_tsk+0x48/0x70 [ 75.249926] [] proc_pid_stack+0x148/0x220 [ 75.255709] [] ? lock_trace+0xc0/0xc0 [ 75.261134] [] ? get_pid_task+0x9b/0x140 [ 75.266836] [] proc_single_show+0xfd/0x170 [ 75.272697] [] seq_read+0x4b6/0x12d0 [ 75.278050] [] ? seq_lseek+0x3c0/0x3c0 [ 75.283563] [] ? __fsnotify_inode_delete+0x30/0x30 [ 75.290118] [] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 75.298582] [] do_loop_readv_writev.part.1+0xd5/0x280 [ 75.305413] [] do_readv_writev+0x56e/0x7b0 [ 75.311274] [] ? vfs_write+0x520/0x520 [ 75.316803] [] ? kasan_unpoison_shadow+0x35/0x50 [ 75.323182] [] ? push_pipe+0x3e2/0x770 [ 75.328696] [] ? iov_iter_get_pages_alloc+0x2be/0xee0 [ 75.335511] [] vfs_readv+0x84/0xc0 [ 75.340690] [] default_file_splice_read+0x451/0x7f0 [ 75.347366] [] ? do_splice_direct+0x270/0x270 [ 75.353496] [] ? kasan_kmalloc+0xaf/0xc0 [ 75.359192] [] ? alloc_pipe_info+0x164/0x380 [ 75.365238] [] ? splice_direct_to_actor+0x62c/0x7e0 [ 75.371878] [] ? do_splice_direct+0x1a3/0x270 [ 75.378007] [] ? do_sendfile+0x4f0/0xc30 [ 75.383695] [] ? compat_SyS_sendfile+0xd1/0x160 [ 75.389991] [] ? do_fast_syscall_32+0x2f1/0xa10 [ 75.396303] [] ? entry_SYSENTER_compat+0x90/0xa2 [ 75.402693] [] ? futex_wait_queue_me+0x3d1/0x5c0 [ 75.409422] [] ? mark_wake_futex+0x120/0x120 [ 75.415468] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 75.422207] [] ? __fsnotify_inode_delete+0x30/0x30 [ 75.428790] [] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 75.437262] [] ? avc_policy_seqno+0x9/0x20 [ 75.443126] [] ? selinux_file_permission+0x82/0x470 [ 75.449798] [] ? security_file_permission+0x8f/0x1e0 [ 75.456527] [] ? rw_verify_area+0xe5/0x2a0 [ 75.462389] [] ? do_splice_direct+0x270/0x270 [ 75.468522] [] do_splice_to+0x10c/0x170 [ 75.474121] [] splice_direct_to_actor+0x23f/0x7e0 [ 75.480594] [] ? pipe_to_sendpage+0x330/0x330 [ 75.486724] [] ? do_splice_to+0x170/0x170 [ 75.492495] [] ? security_file_permission+0x8f/0x1e0 [ 75.499221] [] ? rw_verify_area+0xe5/0x2a0 [ 75.505080] [] do_splice_direct+0x1a3/0x270 [ 75.511028] [] ? splice_direct_to_actor+0x7e0/0x7e0 [ 75.517671] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 75.524224] [] ? __sb_start_write+0x161/0x300 [ 75.530365] [] do_sendfile+0x4f0/0xc30 [ 75.535882] [] ? do_compat_pwritev64+0x180/0x180 [ 75.542268] [] ? __might_fault+0x114/0x1d0 [ 75.548140] [] compat_SyS_sendfile+0xd1/0x160 [ 75.554264] [] ? SyS_sendfile64+0x160/0x160 [ 75.560224] [] ? task_work_run+0x14a/0x180 [ 75.566093] [] ? do_fast_syscall_32+0xcf/0xa10 [ 75.572300] [] ? SyS_sendfile64+0x160/0x160 [ 75.578245] [] do_fast_syscall_32+0x2f1/0xa10 [ 75.584393] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.591035] [] entry_SYSENTER_compat+0x90/0xa2 [ 75.597270] [ 75.598892] The buggy address belongs to the page: [ 75.603822] page:ffffea00071429c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 75.612087] flags: 0x4000000000000000() [ 75.616034] page dumped because: kasan: bad access detected [ 75.621716] [ 75.623317] Memory state around the buggy address: [ 75.628220] ffff8801c50a7700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.635554] ffff8801c50a7780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.642888] >ffff8801c50a7800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.650220] ^ [ 75.654079] ffff8801c50a7880: 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f2 f2 [ 75.661413] ffff8801c50a7900: f2 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 [ 75.668745] ================================================================== [ 75.676089] Disabling lock debugging due to kernel taint [ 75.681950] Kernel panic - not syncing: panic_on_warn set ... [ 75.681950] [ 75.689334] CPU: 1 PID: 4470 Comm: syz-executor1 Tainted: G B 4.9.129+ #47 [ 75.697458] ffff8801c6c0f0a8 ffffffff81b2bbb9 ffffffff82e34a00 00000000ffffffff [ 75.705541] 0000000000000000 0000000000000001 ffff8801c7bb2f80 ffff8801c6c0f168 [ 75.713531] ffffffff813f6775 0000000041b58ab3 ffffffff82e28a03 ffffffff813f65b6 [ 75.721547] Call Trace: [ 75.724121] [] dump_stack+0xc1/0x128 [ 75.729475] [] panic+0x1bf/0x39f [ 75.734469] [] ? add_taint.cold.6+0x16/0x16 [ 75.740416] [] ? ___preempt_schedule+0x16/0x18 [ 75.746626] [] kasan_end_report+0x47/0x4f [ 75.752431] [] kasan_report.cold.6+0x76/0x2fe [ 75.758551] [] ? __unwind_start+0x368/0x3b0 [ 75.764513] [] __asan_report_load8_noabort+0x14/0x20 [ 75.771242] [] __unwind_start+0x368/0x3b0 [ 75.777023] [] ? ptrace_may_access+0x24/0x50 [ 75.783057] [] __save_stack_trace+0x59/0xf0 [ 75.789015] [] save_stack_trace_tsk+0x48/0x70 [ 75.795149] [] proc_pid_stack+0x148/0x220 [ 75.800924] [] ? lock_trace+0xc0/0xc0 [ 75.806350] [] ? get_pid_task+0x9b/0x140 [ 75.812048] [] proc_single_show+0xfd/0x170 [ 75.817916] [] seq_read+0x4b6/0x12d0 [ 75.823252] [] ? seq_lseek+0x3c0/0x3c0 [ 75.828765] [] ? __fsnotify_inode_delete+0x30/0x30 [ 75.835321] [] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 75.843788] [] do_loop_readv_writev.part.1+0xd5/0x280 [ 75.850616] [] do_readv_writev+0x56e/0x7b0 [ 75.856477] [] ? vfs_write+0x520/0x520 [ 75.862003] [] ? kasan_unpoison_shadow+0x35/0x50 [ 75.868387] [] ? push_pipe+0x3e2/0x770 [ 75.873902] [] ? iov_iter_get_pages_alloc+0x2be/0xee0 [ 75.880739] [] vfs_readv+0x84/0xc0 [ 75.885907] [] default_file_splice_read+0x451/0x7f0 [ 75.892548] [] ? do_splice_direct+0x270/0x270 [ 75.898668] [] ? kasan_kmalloc+0xaf/0xc0 [ 75.904353] [] ? alloc_pipe_info+0x164/0x380 [ 75.910387] [] ? splice_direct_to_actor+0x62c/0x7e0 [ 75.917027] [] ? do_splice_direct+0x1a3/0x270 [ 75.923148] [] ? do_sendfile+0x4f0/0xc30 [ 75.928832] [] ? compat_SyS_sendfile+0xd1/0x160 [ 75.935141] [] ? do_fast_syscall_32+0x2f1/0xa10 [ 75.941439] [] ? entry_SYSENTER_compat+0x90/0xa2 [ 75.947820] [] ? futex_wait_queue_me+0x3d1/0x5c0 [ 75.954203] [] ? mark_wake_futex+0x120/0x120 [ 75.960250] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 75.967004] [] ? __fsnotify_inode_delete+0x30/0x30 [ 75.973564] [] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 75.982034] [] ? avc_policy_seqno+0x9/0x20 [ 75.987896] [] ? selinux_file_permission+0x82/0x470 [ 75.994538] [] ? security_file_permission+0x8f/0x1e0 [ 76.001271] [] ? rw_verify_area+0xe5/0x2a0 [ 76.007453] [] ? do_splice_direct+0x270/0x270 [ 76.013572] [] do_splice_to+0x10c/0x170 [ 76.019173] [] splice_direct_to_actor+0x23f/0x7e0 [ 76.025640] [] ? pipe_to_sendpage+0x330/0x330 [ 76.031791] [] ? do_splice_to+0x170/0x170 [ 76.037566] [] ? security_file_permission+0x8f/0x1e0 [ 76.044293] [] ? rw_verify_area+0xe5/0x2a0 [ 76.050150] [] do_splice_direct+0x1a3/0x270 [ 76.056095] [] ? splice_direct_to_actor+0x7e0/0x7e0 [ 76.062748] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 76.069329] [] ? __sb_start_write+0x161/0x300 [ 76.075467] [] do_sendfile+0x4f0/0xc30 [ 76.080978] [] ? do_compat_pwritev64+0x180/0x180 [ 76.087394] [] ? __might_fault+0x114/0x1d0 [ 76.093259] [] compat_SyS_sendfile+0xd1/0x160 [ 76.099382] [] ? SyS_sendfile64+0x160/0x160 [ 76.105329] [] ? task_work_run+0x14a/0x180 [ 76.111190] [] ? do_fast_syscall_32+0xcf/0xa10 [ 76.117395] [] ? SyS_sendfile64+0x160/0x160 [ 76.123360] [] do_fast_syscall_32+0x2f1/0xa10 [ 76.129484] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.136126] [] entry_SYSENTER_compat+0x90/0xa2 [ 76.142673] Kernel Offset: disabled [ 76.146282] Rebooting in 86400 seconds..