00088001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$get_persistent(0x3, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fchown(r7, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r8 = socket$inet6(0xa, 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) connect$inet6(r10, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0xfffffffffffffef8) r11 = syz_open_procfs(0x0, &(0x7f0000000380)='projid_map\x00') sendfile(r8, r11, 0x0, 0x400000000088001) r12 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r13 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r12, r13, 0x0, 0x400000000088001) dup2(r13, r2) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0xd2044e63cb89197c, 0x0) r15 = open(&(0x7f0000000080)='./file0\x00', 0x110000141042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) signalfd(0xffffffffffffffff, 0x0, 0x0) ftruncate(r15, 0x10099b7) [ 575.528296] audit: type=1400 audit(1575146919.319:1545): avc: denied { create } for pid=16734 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r6, 0x0, 0x400000000088001) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=r5, @ANYRES16=r6], @ANYRESOCT=r6, @ANYRES16=0x0], 0xffffffffffffff72}}, 0x40010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf0c887bdf013d76d, 0x0) [ 575.647328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 575.694548] audit: type=1400 audit(1575146919.509:1546): avc: denied { create } for pid=16734 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x1) r1 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x2) syncfs(0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) [ 575.895631] audit: type=1326 audit(1575146919.709:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16737 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0 20:48:39 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000640)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/33, 0x21}], 0x3, 0x0) [ 576.364205] audit: type=1400 audit(1575146920.179:1548): avc: denied { create } for pid=16762 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = open(0x0, 0x0, 0x8a) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00') getsockopt$sock_timeval(r1, 0x1, 0x62, &(0x7f0000000340), &(0x7f0000000380)=0x8) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000807010010006c6f0000002400000000000008000011"], 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x703dc1, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0xcc442, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0xfc64) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) sendto$inet6(r8, &(0x7f00000002c0)="2059ae6e6daba3a79ffe", 0x63f741381f5c93a8, 0x40, 0x0, 0x0) r9 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r9, r10, 0x0, 0x400000000088001) accept4(r9, &(0x7f0000000200)=@pptp, &(0x7f0000000300)=0x80, 0xc00) 20:48:40 executing program 0: open(&(0x7f0000000280)='.\x00', 0x0, 0x0) pipe(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/softnet_stat\x00') r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8001) syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) clock_gettime(0x7e5a77f3a02fe65a, &(0x7f00000000c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000080)={@local, @remote, @loopback}, 0xc) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="000200000000005afc8500040100c910ff01000d00000000b379f26337296b0b000000622db173ca9a177af8b0b259e5dbee00492a3dfec54984d30c0198d3ca990e8712a7ac3658c1007e6b9036229e10f6920a9b712486c396ed7d8938d6466ec47918429b1b829e69bd2c3ff32ffa79fbdb43eed3d1ffc2b373eccead9bb707915332e9e27b2e1201008719d47e6902f4c881c43c0cef5679a939bbb019dccadf8d55a65867a9c0aec1bbc801ebce2ee8321d9c204c4bf2bffeb15ae02118ae43c984506cd72d28abb06635ea950ad3bc857f32f45e65d5455fa8e3ded77ed04a92b629e1d2f18468f9e5375a0ee3ac0d74c0482025de8c7a85ee52f883bcea0b005b6f7a7dfe9be9f2d50b162bb3b54cda00cfbf434790c54a40e2c56f0960243bfa8265415c4170c5b9"], 0x20) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f00000005c0)) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x0, 0x0) 20:48:40 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000080)='#GPL\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x1f8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = dup2(r4, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() getsockopt$inet_int(r5, 0x0, 0x100000000000001, 0x0, &(0x7f0000000000)=0x1) ptrace$setopts(0x4206, r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r7, r8, 0x0, 0x400000000088001) ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) fcntl$setstatus(r4, 0x4, 0x42801) tkill(r6, 0x1000000000031) r9 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) 20:48:40 executing program 4: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) open(0x0, 0x475100, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) fcntl$getflags(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) writev(r1, &(0x7f0000000800), 0x0) r3 = inotify_init1(0x80000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000001fde), 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700") syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa5cc554) 20:48:40 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0xfffffffffffffff5, 0x4, {0x7, 0x1f, 0x8001, 0x908a00, 0x2, 0x1000, 0x8fa, 0x80000001}}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x84e20}, 0xfffffffffffffdb3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000024007fffffff003f00007701001c00ff0100000020000800f1ffffff", 0x20) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 577.103643] audit: type=1400 audit(1575146920.899:1549): avc: denied { create } for pid=16781 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 577.139995] audit: type=1400 audit(1575146920.959:1550): avc: denied { create } for pid=16762 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 577.221777] audit: type=1326 audit(1575146921.039:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0 20:48:41 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x2d}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 577.407778] audit: type=1400 audit(1575146921.229:1552): avc: denied { create } for pid=16787 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 577.442680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 20:48:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4fff}) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'eql\x00', 0x3ed8f24c44c677b2}) dup3(r2, r3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r1) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) [ 577.853689] audit: type=1400 audit(1575146921.669:1553): avc: denied { create } for pid=16781 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:41 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) [ 578.098846] audit: type=1400 audit(1575146921.919:1554): avc: denied { create } for pid=16787 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 578.124991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 20:48:42 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r1, 0xa, 0x12) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) r3 = dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x16) setpgid(r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000000)=""/6) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f0000001100)={0xa, 0x4e24, 0x0, @rand_addr="74b718a3b6ebc7a7159feed1cba26663"}, 0x1c, 0x0}}], 0x1, 0x0) [ 578.356532] device eql entered promiscuous mode [ 578.489781] device eql left promiscuous mode 20:48:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') eventfd2(0x1f, 0x800) sendfile(r2, r3, 0x0, 0x400000000088001) sendfile(r1, r2, 0x0, 0x1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 579.011247] device eql entered promiscuous mode 20:48:43 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}}) unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 20:48:43 executing program 5: r0 = socket(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x591) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r3 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r5 = eventfd2(0x0, 0x1) fstat(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$cgroup_ro(r12, &(0x7f0000000380)='cgroup.stat\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r13, 0x401845ef, &(0x7f00000003c0)={0x8, 0x8000, 0x10000, 0x1000, 0x0, 0x6}) r14 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r14, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r15 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r14, r15, 0x0, 0x400000000088001) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="081026bd7000060001006e657464400073696d000000100002006e6574646591737f23301d1d69ac366c0000000000000000799463a2d9462bdf2a2e151df4478fe7f3b05bf9bb67bdb92050d233d0bbf1274907a6ca9c7087e68b67be0dcff7e247cbe7ca8dd0dd9c4eae70205ca310929073da98df3156bd7ceab9232cc47ec1e8edee7a6fb85c090858489f1cbbbfcfb31ac87353b8a496d9c4", @ANYRES32=r15], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendfile(r3, r7, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r4, r6}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r6}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r2, r6}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) keyctl$get_persistent(0x16, r6, 0xfffffffffffffffe) r16 = socket$netlink(0x10, 0x3, 0x4) writev(r16, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) recvfrom(r16, 0x0, 0x0, 0x0, 0x0, 0x0) 20:48:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') eventfd2(0x1f, 0x800) sendfile(r2, r3, 0x0, 0x400000000088001) sendfile(r1, r2, 0x0, 0x1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 20:48:45 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x6c) ftruncate(r0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r1, r0, 0x0, 0x40801001) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) 20:48:45 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/soad\x00!\xd0V_\x029\x00', 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffda8, 0x2) write$selinux_load(r0, &(0x7f0000000400)={0xf97cff8c, 0xffffffffffffff40, 'SE Linux', "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"}, 0x277) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 20:48:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={0x5}, 0x8) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2081fc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000001a80)=""/4082, 0x100000021) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x7, 0xfb5d, 0x3}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 20:48:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x4000000000020009) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) vmsplice(r4, &(0x7f0000000780)=[{&(0x7f0000000180)="cae232d09deb20fbb234a3717dd35ac6d59e7d046c0e9d815c268981c7bbf83d6bcf81f3a131bf58bd04c34949bc137df36c3204d9ecfde177644e1e5d4527bcae", 0x41}, {&(0x7f0000000200)="7db46eb4eb1f9914221cb010b778740261d27140daa1ce65ba0b19494fc28a84fd9fa0425543fe764055a03875244c4014003346eac252c4ceef7501674055673d110762bb8fd2ad758ea4d2054dda0307f24b", 0x53}, {&(0x7f0000000280)="e777199050c3edd46a5767135a38f683f071b4bd45f23ec763cfa0ef841c9423bbc38badf14424ce2e81440a4e0ca3b7f6e68b3fd5370fe9bb759c46182af6c0bef6406d08068f283086403fca583b87b999db8560e2541b034fdc6be7611e8ef70cd67eaced67c58a9992b197c9a28bc9328e8fd3b782b5482a3f78555e45f353665e212700bca69a60eb057e069eba3a0a6924df3170eeab62cc4e7f7ff49f64191b6a846931da6c0ed8cb8ed2d3e62f30daf735fa10afa8ed0576b757c8a28db9e6ff1286f63bb37f519ae3b1bcaeb1266575d0089309c5998908127386e21ece32a4710671aee9558a0a", 0xec}, {&(0x7f0000000380)="cd7d400bf9880a20ed6d02f6ffbaa02c7c5ab1b4cc2c6d2cfb72bf033411e73be798825c896a9a910fcf57823cf85e9c3fc77c150da797c10825559ee47c360d886b4a020d68149699a43aec2a067c64d01fe6d1", 0x54}, {&(0x7f0000000500)="99286ff438bd4bade7532dd989e5e1d3cc4e23781d893c8048eb375dc145607e911d672f066593f13dc8d15d0ac27d13f5978ea5cd5ad1bcc13c02475d6548fd6bcbb7daff29b56e4d6b89af6dd4bc2f4d3d1374a2922d70fc50ac3e9e59e703003add226c10f5b9ecca628fc7bb42a19c9b98d9999b4e94c32cfbd0974c38ffdd437f46d92672698c6c130b8d40c6e724733f1f8def1b3fd7462f78e25db33cd714fd67cb4861cf774a2c678a46216572a4b2c24287ecfa66a3ecda8532b5366fb740ebb765b3a6bfc5917dce64dde3e6a0fed4917575eb88094c528e75d3ba5c1c93cdf6237f4ea19ab607d1", 0xed}, {&(0x7f0000000400)="bc0d493955d12b66f8604c393a780fd055ec00e14cf38dc10c367d9475", 0x1d}, {&(0x7f0000000440)="3b732b77e6836ee49acfcb4669d9a9cfa836a58a8c77c13303395ceb1b07379e45f5ec081f8a812714f88c5d0bfc07a2e12319d2b01c667474b8238d87329d58e7274153211853ac2f0c61c91d76da4b587dc353b46ceb69f7b6e987c3fe3b3c1f038ab98d54711447e3d7390d74a8a96627352a8a3164f020", 0x79}, {&(0x7f0000000600)="606b04bbb5266ebfbf2e84b85ddfd2722cb441828ebfd42b240cf6b9fa1150999dc18f242b8276cab54ac8556fdb6347d20faf5240dfb38a8dd15abfe196d3c6d2ba2dc6e518a445616ebc7c484d7f777de0ebd31f9920506e7526319a3a30b2c85f7e66c422b61dd509960530bf68e9ab43bcb6cba563d344d8d47f3476a05833c2832fbdc2eff6e107", 0x8a}, {&(0x7f00000006c0)="67e83161a2e31e75ae332facf86ba9cc325127d0d4743bde788e27c684d55e72cab571f8c29ef9a76b4a8aed9bc08fb080428f6a74109e3b855e05fdb6", 0x3d}, {&(0x7f0000000700)="939ef4adfb203780561c79116cc63bff5ce6ebaffe49a6997bf6e0ddf0ec34542e13aacc247ccd598632901f2046afdc1941e1fc8b879d40f5cc03855ced252d22d5bcef", 0x44}], 0xa, 0x1) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0xa, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x7fff, 0x10001}) 20:48:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) fallocate(r2, 0x4000000000000010, 0x9, 0x7fff) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r6, r7, 0x0, 0x400000000088001) write$P9_RREAD(r7, &(0x7f0000000040)={0x40, 0x75, 0x2, {0x35, "dcea945dc29a0cc6b9c27ff4365843821b4d34470ba9d8538096d6ccf9ccb5409dc77250e2c8ad38b634fbc6100232049ecf146691"}}, 0x40) sendfile(r1, r5, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) creat(&(0x7f0000000000)='./bus\x00', 0x0) 20:48:46 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffc, 0x3, 0x5, 0x5, 0x8, 0x100000000, 0x10001, 0x401}, &(0x7f00000002c0)={0x3, 0x3, 0x5, 0x40000000, 0x0, 0x2, 0x0, 0x6}, 0x0, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={0x6740}, 0x8}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xfe) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000680)={0x0, 0x0, 0x10000, 0x8001}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f00000004c0)={0x8, 0x7, 0x8, 0x5543, 0x3}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x1c0502, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f00000005c0)={0x8, 0x8c60, 0x40}) r6 = inotify_init() ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{}, {}]}) r7 = inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x1) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001800)=ANY=[@ANYBLOB="1ddde2f926d8453a4b05f9f02da8d0702183aeb08f7a197df312729a0d5e57b08b6aba9a1d9e000099cf05ff61dcc00946a7dacd4ab819732fc4afc03e982c96d94cae03050f319d0f87c9cbd727b936d197994cb793ef0ba2b27d9f0861bd7047b84c4d1633d07a562355fe0ce5fa9daa6790d94151398d1236eaf2bdccd2e0ded7fee480972c398e525094386c364bc12e8f5e6c7fcc085c4aa06f82a027076c1245305692de47523fc546d3fc349ee14208a3cd09a459b12dab73a705a35e3d82a274b03700222dd074ba532c0e190e3b805b5b563f290d5f1080dc2f412bdfc883e3bafa7b7c39953ec2d1c6e9c28993959b1f5e5e073f3a34a95041f1d4996ddad4c2a97cff030caa5ce772f48ff485492505dc688fca77165b6dca0162ff4e4ada96d53da90fa8606d31c34a6de6b00f98679ac6411a4e89b1192190c904e66feb42d9591d072aba75e5e03bd8644b47a3450b43e44126037edc2a3d858d0ac1db05c3380351778d910b92c2dc7e4e2cb1d3105d53f93529bdfe41dfc0a6bace672d3c3b9cae02b15804dac87cb299a67119c8448cd76c7213a8f6f378722fa781de093b8157b52af87ddf925c6d041dfd2cb4d2bb5b20913de4fe2a7514b24c009f8a038d80198e29bf95c47b21c7118794880edf32b2d2dbe2e8d9a49f615b3dfe8a37cf5314dfd139a1478ed7284380f69bab570cc7053a94b7debad0ab2cc826"], 0xffffffffffffffff, 0x0) inotify_rm_watch(r4, r7) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000002c0)='6', 0x1}, {&(0x7f0000000800)="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", 0x1000}], 0x2) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r9, 0xc0506617, &(0x7f00000006c0)={{0x2, 0x0, @identifier="431ac3553d212502bf42c05ebfd9ed2c"}, 0x93, [], "b1ec6e52afaa04708dd9c2681af0c093d81c493c845f447a53f6b53279f41ef4e44038ebcc1a2fe99a48b93af0ac33cbe1da3659556a17d06d9d03d3bdf5ef849e4eede0eeba0d781f637da871cccc19f7f3e8bac1ca1b4b65567640149f0c0f5a491c5328a02c9bf98bd6066896c2ec98229c156da248bca7c70a261448cf71d32fbb1c6c95aba96baf36924a3e3b206004b8"}) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="0002000000000000040100c910ff01001100000000b379f26337296b0b000000622db173ca9a177af8b0b259e5dbee00492a3dfec54984d30c0198d3ca990e8712a7ac3658c1007e6b9036229e10f6920a9b712486c396ed7d8938d61b829e69bd2c3ff32ffa79fbdb43eed3d1ffc21a53af1a4cb373ecce659bb707915332e9e27b2e1201008719d47e6902f4c881c43c0cef5679a939bbb019dccadf8d55a65867a9c0aec19bc801ebce2ee8321d9c204c4bf2bffe0000000000"], 0x20) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 20:48:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0x108, 0x0, 0x0, "1d427c7a73540ddd8d693a2f292b1933b2a17ef1130f2751d3c125134073fadbc9441ba13d86459bc64115f7aff0deccd021a6a47a5dfa2e75866ddc379cbaa17aeae1e922e584e3ef0bc757ccee203cf1415cb3328533cd075f20ce1f3003137757d124d06a08594bcee3f30cd8a54c2b34847b638541072b8be5791d396194c8078abe6d8db1e9e22063667fa18d7060bffe79db69d3f34e934d0c1fc57d223da49eb39ddccde10395c018491f09f2f51cf24d9d6866f0751b6e3da37ed764dd588efe168c5a9c0f23286345ca31d92a079e4c7df118a96b7ae833fe4ff6d8e67cc2e9731c3da475b8b78592ac585208"}, {0x60, 0x0, 0x0, "3dbda8ee53ca88a63cb3c1a83c4dbea5cd60a77910cb9fba5a56997c39aa72dfce395b6b45b00dd50215648019cfc2925df93550c4c3bbb5a23b2486d8b571f66a8173067b1cec137c"}, {0x1010, 0x0, 0x0, "f075b032db4cbc939f6f556ca13730d53530bf5a088b6dca7754f813d5eb4d43d576be6381190bae522bc498e5b7adae8332930c17055e554425914271c7c6bc3ce691a53984bedfa908f523a4cac505a92179c42549e100b531136d7869b7607d0a1a8263af0f7e80370f3bd2d9dd09b99d5c477b5403c2ab42441183730cf28f2f3765eea8c34083cf70eb1d9cbad3d9950020398247b821e11f1b891f2d806a35b06459b63454862b28b502a45606205d8ad56c881f3ca31d33cf94b101ebae3125002e3844d91e0c514f89664868b6031fe168988d974f9b5eaae802e13d023a7a9966ed189d019e33e645bc82fcd789df6f95ccb08f668dd6b0283a08b825c5b3927448da12bbfbfa48baaf65e892cd02196d0a76e8add221f6eb934b3ffd8604817f1ccce0c5531d3c2f7628d489703d007879c9fc8d1ffce53e8a310ba8b2a81979f33dfb10e5a07c235ae9ab4020d69c6d9051acffe6fa368058fd4a397628d9e5f4681104c9a86a3e9c3a2169d655e96656bbe823cd6343c04d3d634bc1c8e82cf4723c24400b4b9c41e199a4781257c9542765cef42f30ea967824a7cce3946e45a10c35431ec4ba3dbd094e4c3846247100545e782144a75042bf6c10d3a643a92c9d1407fb8b5e92c78d464b404929917d0e0af73659edd5e43a805f6e9ac99b96dd8d2881db6dd175fd7ba7b03351ec7fc4f654a6ed17c59be0b09a91cd894709ed521fd7146ed1295c83ad6cef4636f117607aa1c7a8612875b431885d6f0687b0921fb2f02f46fe90f00a5c0697e39de5af87e57b3665c6ec984526e03b9cffa1b1fe156667b291ad2795c524025f7d41d71623d46db7deda21f152b1e92a24f01c54529b6eb12d337bf8d0316552bfe065fcdc7d568ce010982739d70372050e14e86549fa6efcc195decde0ee8a4ab661b6827d1263fd1d80351e4bdc8734d16dc317d4faaf9b2145209109dd4f45563d49b1962e719d3a1469cf9cf534f0818b6db4f31e855afb5cc9574efa466cd7e058197eff6a8457bd7db12ff1ecd201de7be354f5a7a8bdcf8080a81c1154b7bead440afa9b52e0332c0c09e9854106f01f09a9926ecbbb3e3b6ffe56a883ad0b85ef6bc56fbcd88da9ad9a278a0f1024b1c92a2ef1c9de78d312f0f5fd9dd74bf1ca9af3108401ca6ba3c3f3af819e84e36e2a38b8619e7677b4bcadec2c662e88af3ea1706bb673db283a6ddd72393dd15fde83d39f70a8240abfbc6012d2c33e4b3d2fb9f12aba7f7a504d3133843383390bf47e606a80d627b250cd6e922d10cda4d32c79a5733df846d42b855a9c0132a6d7fc0f3e3d57d28bdc2d3433b767fa972cf8fad4986efa76fd4560491fe6b4f03369930610695236f2b01c144eefb074415be8a5bd25b184436d829018eba3b5c0e00429d0d0d57a841951a1f50eabcdea6dcb4f89b214eeedbe1d8afbdc71fe47b7a5a02d6c72317bead99f7f1164b1f9d42d38cc12e1b3a8824697b506114dfe8dfd0323cef2d72ca59919075a0ab6ff122b4a3de76edc8b8cda2bffcccc386b680effa97b9ef5b0737478f22bd185f0d399123908443e03b6da7e86069c1d10cbccee63dfca6e715ff4d2b3de99073fab4854a230817ac64410a5f2752e7a842d49e13416861134ea17e30c18fe7071bb6bf8afa7b6634f506e1f914377355664daa13a3962fba6516c5d70c0d6a05db6d6302f9009bbb6011e50870a036848592b76cd69a05fc9bc25c646fc640a7c13792b2e4a4156a8f8bf30fcb438abe33d1c7d848b05a00f8d23e4479b69b618befe855eef1bb101b8ebbf640ce2a67c868f11701bbbf23e33145bd3ac729f6fe5f1b909fc0867656b6b650c3305823754d089012461dcf9145a26efce8510b882e5ba80d4fde4c3ffa67895eaaf005ea8cffacbbe8f8beee04398d843d7c7d4bd49412bb584887bf17a6497fbd563f4bb8fd84da8069be78663e5047572618ccca35a97117af2f9806f18847c08c7f8098ac028b5207777641b5c96bc0f218b082f144dd8da7ac0b5889bc67b423628d25ae170636363507bb79da8408218a5c11a4d7c6373cfd8188baa2ecf9e5a73fc277e543a50c51cc8d3e18ed34732223984e6f647b9ed90fd4158497f085989dd7df90256fc9223168aec41ca590cd75de28fbb7dd1d9cb94e8c0e6794141b327fd3bdc317bf8df35eba2265fa40e9f765b27806a92b9379e7c3442889da50802ec02235c32fb188180ba54bca846de1ff98dafb3a8a4497ca57212928345f1bcacb58a564f81fd15a09b8640b8996e2af859addfac7c490c6a3f744a411f7e795e77ad9de7ff735590f976fbadce3821f45cea2f5bae1d2d1e18ec15c270ef89d0c7288ae9a697929a77738f3308da2454c8a89692ac0351901a2963f57b8a9a07d88feccd8aed352d7ac79801320ac2e493e9b5a2671a2afa3da4445e92e372b07e2c47d1e42ecdea3e88c7d7de06bb51caaed6b4170a2c6ec557bc4ecb606c1bb8fc7c58edd8a7e04d7148ef7914f4d62da1b8ba4ce392361c30b8ffaf70b2fe1dc81d78772b38f25880bd1a9ef889582dcce5ed31f9fd8573ac2ac8ed68cbed289021ca5b755d65c331a6931ab9822e1a4c65b3dbf3d7b27d6f8d688b83fa9d7e18b554b7326d61ec0d7b499c04ef420ba4a6085139e8d405a868e6341ffe3c687469d1ebaf5e673dece6eab10470336774b5054c6bdeba9d2d7b7de42308abf6804b0b55c378540de771257bf3d544509c266eaca63e0a2f62228f91b0aa1e1f863721808c47e9695e002ac939d4db338e1475487b6799c5769cfcf5ee9a9a323cef5089ee7d10feb217a6eb5f87cd4790a739ca659ee66fbb908fd0e8907c797fcf4d2b7b2589048267ded9d48f816990d6f619a36043a7c8b37f184b6ed54690051b0ac89a30df5db2d1a5708bff7b813cec518fb7e320281f178d9b1f08ac671dab09f9ccdf1446f45cea26ecb1e3704a0e5b59b6b6af4339ff1df7377c307149f8d7f27dc3f447c89940e9668a58fbea8f204c1a2d47664fbcfcc3012b1e3c1f9ee786248bfa644c7786ab7a25bdd3062209892c93a9c6898cf3b4f07356c3a6b01dceec990f5ad5c15b041c965aaa29f054d269eb66a06ab716379f8acfa7eba76cc246d9906f1abcfebba903ccff32b46b8cf6865db3a01fa943974b89d17514e89e0c6110c0246b3416e2f68461979e6eb70c96fc14758796752f4ef6d2794dd15dff155afeee9969f43c58240f117b507c0b40b26878e36973dc6811555e60e44ed1db0a3fc9e68ada3002bffc336c3535c2d7d523bb44b517200a2cc252211b1f7af66be800fd1d49eceab7831b34b636679236d194c0bd5742a5ad5fc938e602390427f733b31411ce641de92b96db69299af4ad47770af2e78453767362bb593e73ae0480edb4861c2ef704295198e40c9838252d39e05198a3b6de9e629867efefc4505aa34675e20bc0bc7682a4f48169089dc2614556a19baf10fee122c23356f9e2ea07bb067aab2f76af3ce155964c82f9564edcfcf8117835d11d64c9f33472449e51231a76febf3fd6c280c758aa8e8c3e098e3dc1d977cf6ded62e60b1a7d6d3af07b6bb980ea1c4126f310672e777d8e7f4a13135bde5c3192089765759fb292411c3d4f0ff625caa7dc4ce89652a73cbed52474623eaf4cbc5ab345c18aecc9a6a33ce4689bd3fc1d86b905eab1fc78d0e5adc5656a87d047b0dbbf6c159eaf6e944cd8ab368455e2db4746e0ccdb764bfe83e715f52204365e759a08f7a67eece895f163059063c5f2723c5f9bcd1c0d88d48ec99614b0324a65c320de2c811760cd027b1301ecf9bb4e1d9e33fe4f779b7df1137c0ab44e7421b875b1d036024aace1fa969a9f1e2e3cef7bbc489ee6cabd3199e74f1596c305e091b1cf71dcfa5622b5e57e58daa7915c9dfbfcd19105148dccc266f0f4916c606804644d9a0dabd41c83a1bfc1bfcbd271bbe82551281bf68927d6c3ade93aeaf89e92398c3bf317df5b11109c1eff1ec3283fd23c84b389d9e16c39b345e9adf957771271d5b81af8c4d64ebb73674a41d600735f1bd38bda3b1521ce7b86cf60e89f95e1c52206ea747c0321c4bb1c71d48d8119e270b4e90195e53a31ad23512096c200262f85a611288f3a6b204d6f2bb2eb340309a01d2658b27ee46d68a7489ccb395775bf464cb2496669b2f7faf173ed3f6ea372b0dbdd39d3fcf452459566b163896ae10ffca8a08fb79dbcac23f84841f4323135700afc5a776db09e7f3c35536ce7ec289d10a0ad7bcf9d19b6de09522d92fad99383e1f042978120ed55a01706e81f4e8839e894e812d56805c6c693f1af46842c8182e284f222cb53a5efe157a2c625ffd612a5037f866cf2f5e0168933048f152c2f756512339108c691f656fbb24918b82fb97a9e933b859580a0ae969192c831c3b0a27f81c8af10f0efcbd55376f67c3c14dee3b546dd771fdff5d97ee546a50e0bb82931bb2467cf9d573280ab0fcc3cc2861a4376f85c5597259a92c3565ee5eaeeb0e2d85bf5598f71e8723bf022763938ea5719a3c06db0e71cda29cd1cf9f942281f0d98a1e1818b474fa93431c0151b42d51f200cb1b0e6707fd73201defe0552a5b353a1e530d7e59637c6d3cfefcdb3cd4b6b9c4abe28fbb0823d4e43eb123ff07c4638f56a1f300e0eda807c9d3f5f35b41e3dcc3b94f8fc9c583d875db6a18887393cc91140d3a9dd1ecba0b11f736ede13f28bba9e883bad75156dd5aae410373b64d2db6dabe8ea0e6d07d706c1b02f8dd958960ae4c775af08acc026da06979fd3308d4c83b2143388f3837c74f03cb0d461180ac15f7a4cba2a254fc8dc54d917035ad20db9d9f657412c0ad7ed59fbf6a35351e00b6118487f82ab33139bed0bcd2b4f3f935699a41a595138f1b8d8cf557462fcc2ad5011f0f2c0074a40b939a232d3ed064fa5d03dbdb55f9af39a19bac3f24030503e1a6bf1c33f94f5b6e20dd7df6c179100c13c4a1f53c2d0663ed6e83a7703bc8f7952b45c365b15e736d5a233e741fc3486b4ac9d0a3ae2ef3377640d92e0e9eb1454789292a5cb1ad0a156a57607f945f8cc3ffa724dab7f817dbd4371091ae71b26171ecf11ee1b4846f8a18ab1d9be16c2e9a548fdc71544b6006e67847c6df05e496e87e29e842df05f7f2a3250af989c95d3fc430c5e6566213c9207df96b56b77759e3f44e1a0b5b9bbd0e75f515f5f2da4d534ce4ab92d8c8ed79dcf0626cca73f3e68f5208cedfa4e042a23194802f9203e6f98306eac7cc1e1d25c875d55bcd8d301a0c8c9be204ab572b9298c26ced5754e28b7d819970c51d34df5b4dbf6e7e61bbf5b69b712f572ec401c7adcf10c07b68d520c7a3372712f6defe5ab2afa012b1dc6bfcd47d0acb3f3de06b28a9eb34fffd555e7bdbe0e110e192e7ff7d5bc17d283d0b403ac5c3b151aab2a70bb67b2c5d8cc8088c6254d39fb23f6d192a025a14d65b254a3daa8cfedb70af4cbeb1b7d8a66076ff3510cef270101d42895c543000baed6307c755ffcea8d9da9a43b01db516984577bc68a8d37f653365b837c482777a6f4e67026ab36678aebe47d53376d5b5341f77e5c74bf340a11b50d70331c959a3876c1ab3d0dfdd269ef6df5ce7923f7de1679da2cc60829d427d60f6b61fcf80074f605e47be0d131c80fb2752ae1c9e1a930bf7354b27597b1ca273fba33eba5c52ac9a437e1e6ced53f16b6ffbd08f301d304899bfd872520a2a4981f"}, {0xd0, 0x0, 0x0, "abc55db7df57eb345670b0b1ec3e94a643ddac792f859dedaf4f5d68a8e6a35ff4deb64efb376e152554718bdf234deccca79638483f6c672a260103b45f083a57344e4175dcae9fde6377b4767770bc681165617451631f2f4e6f55d17da70ffa5f750b825a77f1c5840603fec6e5ba18fd005741d14d8659fdd2989c7d65fcdef3d03c7336a8da530e7d23b5ea1c0302bdf32f9c9b576c594c8df223bed8a22111672973c95bdb2518333475d282388b08538cbb50f25670"}, {0xe8, 0x0, 0x0, "81564bcb8014e16d47c1c3429531f070de202436ca60a3a3f90c0c1d24ed4d8b951ec694b9d312459bf9ab45624f2767c617d0648d83cdac3c7ee5b64c83912c9ecde8e111aae1520f940c7e12526bbb4ed31a712f0c1ba3508a19301dc8f40b77aaf465dcaf75221916d0244ca633a76268175172374bad6a1e987f9b753efbca0a1b7a25d6589b1dc7496843676ff5d3845cf535fb852b7b1c18a326800c9ec11e87e114482151056e344898702f792c0991eb265468b01a8995c0cdee0f4cc51971747a5cfea3ed584eebe2f83e740b"}, {0x30, 0x0, 0x0, "29380011944e69438c432f1ee89bf560691c9237a8957c5cec"}, {0xd8, 0x0, 0x0, "445ead7e259417257c4053de930c593bb3307608803785eed23eee42480f922c99dac69bd82386f750b455b46a469ca325340e3d9c6da14a47ca0739f8e0e01602adaf751d281575c0d743a1357fb2095065143db45a3747b68a4ca11ca85a88e60bd8ab438bed35a664f1939cca970975ceaced8c1c98ed5eb072a4c655d1555f537fddaeb1f283a044376d5df40e835e4ee056c88ca62022be5b2929f40da722391ad2befac51c5506aa8c706ee44abc2ec5b1f94ceb9794a89d8e515e027705"}, {0xf0, 0x0, 0x0, "448d9d2c57d4ed14e934e8cdc9f59f20285ee5d990417d49684f81ea1fe6eb9b3e8f93f41e50d85ae2173eac934242a791751f5370d010a834db0c8660c2c3aa5d18645498b3e92d31a2897cf09e4d790a3d2ab58a6d955a9c949d844f57b269bcea8baf6a191031da827ad118f7b647c9a4c12e0597bd5da969edd2692d914c0ee6319794935999ed0000c6eabeadd601f6ef683827696cc65372bb2b8905e5b860b0db8232f9105930836a1cba6aa698d17ee815c67789752be254230c8ffec364fe7514cde305553e05b965b05d7462469ff98bdd0c2e44"}, {0xae0, 0x0, 0x0, "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"}], 0x2008}}], 0x1, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000026c0)={{0x3, 0x0, @reserved="daab03b520d16a2b0214b04ceed8b84c25dc651decdc676b130bba0b09655e7d"}, 0x1000, [], "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"}) [ 583.074148] Dead loop on virtual device ip6_vti0, fix it urgently! 20:48:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0x277, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000180)=""/218) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 20:48:47 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0", r5}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r8, r7, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(r10, r9, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) r13 = dup3(r12, r11, 0x0) r14 = dup3(r12, 0xffffffffffffffff, 0x1c0000) preadv(r14, &(0x7f0000000000)=[{&(0x7f0000000180)=""/68, 0xfffffffffffffeda}], 0x1, 0x0) r15 = socket$inet(0x2, 0x80000, 0x0) syncfs(r15) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r16, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x40, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xc8aaec71de60fc8a, 0x1, 0x0) r17 = open(&(0x7f0000000500)='./bus\x00', 0x141242, 0x0) close(r17) r18 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r19 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r19, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r18, 0x4c00, r19) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r17, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r17, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r21, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) fstat(r13, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000040)=0xfffffffffffffeef) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x8001, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r24, r22, 0x4, 0x10000, 0x5, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3, 0x0, 0x1}}, 0xfffffffffffffe91) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r17, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096}, {&(0x7f0000001940)=""/212}, {&(0x7f0000000600), 0x3c9}, {&(0x7f0000000680)=""/53}, {&(0x7f0000001c00)=""/189}, {&(0x7f0000001b00)=""/68}], 0x3) read(r20, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r18, r19, 0x0, 0x180003) 20:48:47 executing program 5: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1, 0x3}, 0x0, [0x0, 0x8, 0x0, 0x2, 0xffffffff, 0x0, 0x2]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x200000, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000340)=0x7) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = socket(0x5, 0x80000, 0xfe) getsockname$packet(r5, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r6 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x0) mknodat(r6, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=r7], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff0d70}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x19}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x1c}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000049}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005040), 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x1d2, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r8, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) ioctl$RTC_PIE_OFF(r1, 0x7006) 20:48:47 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000380)={{0x0, 0x0, @descriptor="13b997e9b61b5daf"}, 0x1000, [], "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"}) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x24000000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)=ANY=[@ANYBLOB="81be6470ed545b73bffc2df53e5a48ecb3a609f87e4cda3be78831a37faab95c065c8664d2d243946d9f077edf71560d55ca4602c2e063129c4b7393b342a7500a1fce623fc3d1ea8cc5db9e6d5c4c0d32dc1ea19ff692a60ef32da89bc9", @ANYRES16=r5, @ANYBLOB="08002cbd7000fcdbdf2506000000100001006e65746f657673696d000000100002006e657464657673696d30000008000300030000000800040001000000100001006e657464657673696d000000100002006e657464657673696d300000040002000000100001006e657464657673696d000000100002006e657464657673696d30000008000300030000000800040200000000080001007063690014000200303030303a30303a31302e30000000000800030001000000080004000200"/202], 0xd0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x41001) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x3, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20:48:47 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x0, 0x8000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x80001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'hsr0\x01\x00', 0x8000}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(0x0, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = socket(0x200000100000011, 0x2, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r7, r0) sendfile(r5, r6, 0x0, 0x80000001) r8 = dup(0xffffffffffffffff) memfd_create(&(0x7f0000000240)='.^\x00', 0x0) creat(&(0x7f0000000480)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0x0) r10 = open(&(0x7f0000000500)='.\x00', 0x0, 0x0) close(r10) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r9, &(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') accept4$inet(r9, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r11) sendfile(r7, r11, 0x0, 0x3) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0), 0xdd) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) [ 583.798397] audit_printk_skb: 12 callbacks suppressed [ 583.803642] audit: type=1400 audit(1575146927.619:1559): avc: denied { create } for pid=16886 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 584.021785] audit: type=1400 audit(1575146927.839:1560): avc: denied { create } for pid=16890 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 584.295666] audit: type=1400 audit(1575146928.109:1561): avc: denied { create } for pid=16890 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 584.397852] audit: type=1400 audit(1575146928.219:1562): avc: denied { create } for pid=16886 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) open(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x0) mknodat(r3, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64=r4], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xf9}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000400) io_setup(0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) io_submit(0x0, 0x0, 0x0) pipe(0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ftruncate(r1, 0x1ff) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet(r6, 0x0, 0x1d9) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000480)) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) sendfile(r1, r7, 0x0, 0xa5cc554) 20:48:48 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000140), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400202) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000300)) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfa) sendfile(r1, r0, 0x0, 0x80005) 20:48:49 executing program 2: r0 = open(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000400)='configfs\x00', 0x50, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x4}) unshare(0x40600) ftruncate(r1, 0x39) r2 = gettid() write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYRESOCT], 0x286) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) inotify_add_watch(r5, &(0x7f0000000280)='./file0/bus\x00', 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r7, 0xa, 0x12) recvmmsg(r8, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) sched_setaffinity(r6, 0x8, &(0x7f0000000100)=0xffffffff) [ 585.382310] audit: type=1400 audit(1575146929.199:1563): avc: denied { create } for pid=16933 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup2(r0, r1) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600100001000130700000000000000007f000001000000000000000000000000e00000010000000000000000000000000000000000e400000000000000000000d90522ea0db69a5d79881701e8d3862bd196088defe3094228b94818abcb0c76b824a941d66a8486ad5f36d5ff5fca80f55d0e5c99acc371c037725f960ac19fe3b7d5818d5111cf6251f26511320ef4d36db6035cf47529ef5e492d3e7950203a353936641449d97d175c4a09280d726e29434278012439fafd5b32381a8a2c0b44b79aac7e747e2e656f1b6739ba0f54c109a7d581842ab4", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000060000000e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"], 0x4}}, 0x0) [ 586.098110] audit: type=1400 audit(1575146929.919:1564): avc: denied { create } for pid=16933 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:50 executing program 3: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000600001000180002808cb6e9b81e3677090063a493a0000000000000"], 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x88001) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000005780), 0x4000000000000d2, 0x0) 20:48:51 executing program 0: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r2, 0xa, 0x12) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) rt_sigprocmask(0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x8) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r5, 0xa, 0x12) recvmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x16) r7 = getpgrp(r4) fcntl$setown(r2, 0x8, r7) setrlimit(0x1, &(0x7f0000000080)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r9, 0x10, 0x0, 0x10001) 20:48:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\x94u\xb7\xfbr\xf3\xf0\xaae\x8d\xa1\xa9%\x00\xb2\x1b\xb3o\xcbe\xa7\x8c\xd6\x1e\xc7p\x86\x8fG\xc1\xf8\xc6\xe5=+o\xac\xc3\xf0N\xca\xa5Zm\xc6\xa0\x110\xd2q\x98\xc5\xc3\xaa\x89\xc1\xce\xde\xf1\vp\xderD\xc6\xa2\xc2\xc3\xfc\xc7\x87\xf0O\xb8a\xd8\xef@uu\x1d\xef\xf7\x17@\x17\xf1\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$unix(0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[], 0xfffffef6) fallocate(r5, 0x11, 0x0, 0x20008000) fallocate(r1, 0x8, 0x0, 0x8000) 20:48:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f0000000140)=[0x43, 0x5]) 20:48:51 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000001140)='\''}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000d) 20:48:51 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 20:48:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x62000, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x100000000000002) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r6) 20:48:51 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) signalfd4(r0, &(0x7f0000000180)={0x7}, 0x8, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r1) write(r1, &(0x7f00000001c0), 0x0) open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0x12f}]) io_destroy(r4) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="23042dbd70000000000009000000100004000c00010073797a3000000000"], 0x24}, 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x20000004) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) setxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000400)='TRUE', 0x4, 0x3) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000300)={0x427, 0xe0}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) lseek(r7, 0x0, 0x1) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600) 20:48:51 executing program 3: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000500), 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x200000, 0xf) fcntl$getflags(r0, 0x3) add_key(&(0x7f0000000180)='dns_resolver\x00', 0x0, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) r7 = socket$inet6(0xa, 0x0, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r9, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95}) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000840)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0x44) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r10}, 0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="affaa70dc04ee1b99de40278296ebcc82396da017b4a12bafd9e8f6f7b4c710b12ecbd68eea536160eec8574fdbce4b68d95c8becc655ec7a69a3d6926ff8e63d83366a548a033b384f00f3898b8fcc614fc12d83b69e30fba0cb71bf7ea703a079e26f6bd769e47389425219bfba2aa97ea3844484114fd3c39c069a6910968e08cc5a6c6de4097dedbe8b2c35830f01426bc94232acd7a1ad5848464424e91bc920ebb611d8fc020bd41efd373a051"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 20:48:51 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) waitid$P_PIDFD(0x3, r2, &(0x7f0000000140), 0x60000000, &(0x7f00000001c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) fcntl$notify(r4, 0x402, 0x80000009) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e23, @broadcast}, 0x3b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x401, 0x3}) 20:48:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c, 0x0, 0x0, 0x0, 0x2fa}}], 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x2, {0x8}}, 0x18) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000180)=""/41) bind$inet6(r2, &(0x7f00000025c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0) [ 588.346507] audit: type=1400 audit(1575146932.159:1565): avc: denied { create } for pid=16985 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000d1c000)=0x8002c, 0xfffffffffffffdce) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 20:48:52 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001940)='/dev/keychord\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000019c0)='SEG6\x00') r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = syz_open_procfs(r0, &(0x7f0000000580)='net/dev\x00\xc37u\x06\xd0\xa9?\xc6\xb7\x0e^\xa2h:\x81\xce\xbdy\x82i\xba\xc2\xb7\xc4\xd1*S\xf8\xf7\xc2\xfc\x00\x9f\xd7\xb5\x10b\xbd5F\x9cn\x8d1#^`\xfb\xea\xaf$0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r4, 0x8004700d, 0x0) geteuid() request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x1000002a5) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r5) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r6) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r7) add_key$keyring(0x0, 0x0, 0x0, 0x0, r7) keyctl$describe(0x6, r7, 0x0, 0x276) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000340)='./file0\x00', 0x115240, 0x80) r8 = open$dir(&(0x7f0000001280)='./file0\x00', 0xa000, 0x0) openat(r8, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) io_setup(0x9, &(0x7f0000000440)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000031c0)=""/4096) 20:48:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x418100, 0x14c) sendfile(r1, r4, 0x0, 0x8400fffffffb) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @timestamp, @timestamp], 0x4) 20:48:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a580000000000000000000000000000010000000000000000000010ffffffff00000000000009593c88ff3ed359b6b342a5b31b628ee1bdff739b75074dc6a56b02e800d5afb2f3e5228a74193b2a9e81ca0e864fe848c3040b8fe9058ea0150f5eedce22701042f06294212113a6e87c4ec8a30c6f553b606f1924da2ae7188a0128aaa01f3f9f43f86ce937ef47acf189830bf6267accf14631e3f252ce20e35481223e952072de05debead8febde60b4e996e07fced76b0b1d32e6fd7d647529b9bbafef5ae615999a6b8361eace52f4be6e4867040051e3b7dfa25fee5f16f35e63fa9d41d1932cc8f94368890372975d6432d8e12ad6921b935a4e671c0f5963bb6039b5dec1f69a4d5d69f80065a24793637e3423c8597501fc32edb597da5cfcd1dd03a474554c5e855a476d8409"], 0x15f) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c00082, r4}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 20:48:55 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000100)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000200)=""/194, 0xc2}], 0x1) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000000c0)={0x40000000}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 20:48:55 executing program 1: write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000000002, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000140)=""/245) r3 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) fcntl$setlease(r3, 0x400, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x20000000, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x80fe) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0xc, "e62392d8ce6198dd9c9e"}, 0xc, 0x4) 20:48:55 executing program 0: socket(0x11, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$sock_FIOSETOWN(r2, 0x8901, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0xb7, 0x4, 0x3f, "fad0f934b96f6627f8811519ab91695c", "187c7df9a642a984077104868e709ba14ee1f32e000d199dd05be9ba13db5e09ec1e9cc8c137596c5250ce5c799596161c0890050fb0fabb5e34e18e049810ca162ce3cbe1b13677d76108c5c4287d9473b271cac76689d76208e4865223bc4ec40e45c61102a08275d0e18b810e35778d44b9b843597146af15196f1000a0f938156c4fa3e6fa0afdbdc76c683cc9cb9832efe33dbcac88b31eaf10be2bf571be9d"}, 0xb7, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) pipe2(0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x54042, 0x84) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r7) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r8, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r7, 0x0, 0x12f}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r9) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r10, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r9, 0x0, 0x12f}]) write$P9_RLERROR(r4, &(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYBLOB="64de9dfad9d614eb5cbdefdb21ba755be00e4849d404372a7fa29257ba8fb6cbb147455b2ffab3621b6660425c47f2ac436401ca673b1b933de3aee90759a2", @ANYRESOCT=r8], @ANYRESHEX, @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES32=r10]], @ANYRESDEC=r5, @ANYRESOCT, @ANYRES16], 0x4f) read(r5, &(0x7f0000000080)=""/25, 0x19) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) epoll_create(0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r11, 0xfffffffd}, 0x80, 0x0}}], 0x1, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x1d2, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) open(0x0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) ioctl$RTC_PIE_OFF(r1, 0x7006) r12 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r13 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r12, r13, 0x0, 0x400000000088001) r14 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r16 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r18 = eventfd2(0x0, 0x1) fstat(r18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r16, r20, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r20, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r17, r19}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r19}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r15, r19}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r21) fchownat(r13, &(0x7f00000003c0)='./file1\x00', r19, r21, 0x1000) [ 591.318829] SELinux: mls: truncated level 20:48:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 20:48:55 executing program 1: clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getsockopt$sock_timeval(r3, 0x1, 0x15, 0x0, &(0x7f00000001c0)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0800000000000000ffffffffffffffe900000000000000000000000000000000030000008c0e39a8a6515de9f6a8f48ba82e0977db7a06ac98e73d518b3b663d2e002c1a1af1c04e97bc7f0e5804da5ba8c118bc1f8cbe45c1a6b6abdfcba5baf2e6c8f1674d35a0b0da1169afe0cd088a1caba0335457bd0d00259c1335ba3e5e4437cdc33e46"]}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffff60b, 0x2, 0x3, 0x9, 0xd46, 0x2}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) epoll_create(0x4) openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_evm(r5, &(0x7f0000000100)='security.evm\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/250, 0xfffffe8a) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f00000006c0)={0x4ba, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @rand_addr=0x5}}}, 0x108) inotify_init() socket$unix(0x1, 0x1, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) 20:48:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x80\x00', 0xaa01}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x88800) r7 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r9 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r11 = eventfd2(0x0, 0x1) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r9, r13, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r13, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r10, r12}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r12}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r8, r12}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r14 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r14, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r15 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r14, r15, 0x0, 0x400000000088001) sendmsg$nl_netfilter(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x4e0, 0x3, 0x7, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x6}, [@nested={0x88, 0x2d, [@generic="c95cebcba579c1db6c963d3084494fff486909a4b53ad4a6baca934a16597d0203e95b7f53a781c8f1711f677c4b5bf2f5644e684aedfa1a2dc59d5c9f5290b4fff748b0b800036c5d43c88b965ab8c580a48b31b4171eb7ff8e2be46e756fbc53f2d2d793ae17b2c49f0f84ad8c77ff9d75643fed303a1cbf10c2", @typed={0x8, 0xa, @fd=r3}]}, @nested={0x18, 0x73, [@typed={0x14, 0x33, @ipv6=@dev={0xfe, 0x80, [], 0x2b}}]}, @nested={0x10c, 0x68, [@typed={0x8, 0x7b, @u32=0xc1}, @typed={0x8, 0x3b, @fd=r6}, @generic="bda9e646fcbe8ad5042de711c9240132ec34587db47a45f18d5faf9573bb69ec1528a83ac6026ec490e6ba0cdb194e42e2c0e6d31a7fb2a5f40788eae5e7cc78f66c188628136519fb94a5b2672ee5d7b5b1e16a0bbd4d7fce1127e9804d2576dc2e2f9cb7141ab9bdc01dff65d2b8740764b782f6bff9293654f0c4edbe371caae02f68ca7005376fc35bed54588657016a2a29c50ff503abbc0ba37775833fcbd487db6ff0ae5259ef15f5cea7069af88b2bdf034bcc0a5541f71c62fbf25739ac873010ec572027f7456b8246", @typed={0x8, 0x75, @uid=r12}, @typed={0xc, 0x30, @u64}, @generic="5a6a1506ffee4971dfaef7146746e003efba93e8"]}, @nested={0x290, 0x7a, [@generic="6652adb8a15d1886f8e4f71a959043cbd1a5ddf2dcc283698ed2adf9ea8ff142de5dc718bddcee13eab7d0a5ef36c04ba893337d1010076fbcbb815459d5f21e3f3057c4dc1190105d48ae7e6c5a3a1d404fda5d67d236686af428e510057380969089e99352f52138abd6", @generic="17161a2dd136b03cf74ccb3062162c460d764d86e2e528ee2ad748fa2f975b1e95be7115db1abc8ebe787728fade325bbd7cd8911564152ad718f018081ed765544097e61bdbfbfddd5a8b91902d2d807178e73504e98aa0160e74316df25cd6101a8a910e6b0598a5f99ba68c1caf1ec090ad0a89b4", @generic="79adb0e3e5489edbe473c7f71ddad957898d75c00bf4ef177bab89d868ff74be5549be37048ecb13b4cc640600ca21f18b21db70858d3f9e4e9472749bfc01740c8304e8dfb4460ef11da1849df18262b2cff3d53f1ff20691474b1701a84d97d556ab7ee754acb35f402bc1d99312fe076728cffafbc3f823c1b8b1db6addaba6147d04433a745ca65f7ead236292817780ab65fc1670b0cd0fcfee67a820eb15d122af69f2e9890066c814491c38433da7edcbc8e82444f3236ee3484c27c33405374bae392b06", @typed={0x8, 0xf, @u32=0x8}, @generic="5276964450a6c8600d745aeced961d0f104abd3b67d6e75b727f1c260317", @typed={0x10, 0x31, @str='em1}eth1(\x00'}, @typed={0x14, 0x11, @ipv6=@dev={0xfe, 0x80, [], 0x23}}, @typed={0x8, 0x12, @fd=r14}, @generic="676ff27accaef2476bdcac06a62ec99778106e76f0de610ae7b8e042634f3993d53296ab77b4b5de31947645792653ede0dbddf66fb3c70bf45db473fef09d8c805ebe48f56d0b5aae77171a673d007f523d7733f94cd576373378fead997c7854c21e92b8e6efdb2c7ec8618aed1f6f8fdb8ca680c10cb0a2509c457202932c0740da9b178de10fd0da74f18463"]}, @typed={0x90, 0x4f, @binary="345b316c65f04f72eacef3b27e83ef235794e827702c696f21023cacc6502c8eca55910c07d3ce3f354059621660bc3022a6ab94735b3d64f400a8ea771aa420d2bc09eae2cf85623bd86b96a75dd08edec31d4e10bac73f1cb893196f0207c73d652244ce3fb83b0e09c94187650b3daf3a98466a3d369c92ea5cf86bd7cdc512c36d90cf36dd25b7"}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x40}, 0x80830) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r16 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r16, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x3}, 0x28) sendmmsg(r16, &(0x7f0000000240), 0x5c3, 0x0) [ 591.830314] audit: type=1400 audit(1575146935.649:1568): avc: denied { create } for pid=17059 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 591.909752] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 591.954333] qtaguid: iface_stat: create6(lo): no inet dev [ 592.004085] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 592.035748] qtaguid: iface_stat: create6(lo): no inet dev 20:48:55 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) sysinfo(&(0x7f0000000080)=""/162) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x12) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1ff}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0xe954}, @mss={0x2, 0x7}, @timestamp, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) madvise(&(0x7f0000549000/0x1000)=nil, 0x1000, 0xe) [ 592.100058] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 592.140171] audit: type=1400 audit(1575146935.939:1569): avc: denied { create } for pid=17070 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 [ 592.174580] SELinux: mls: truncated level 20:48:56 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) open(0x0, 0x475100, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x90) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xfb5e6ad1f2bfd099, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000740)="072c1fb5ee415fd908429e9757bd25e49444e22afe2cc6d10dbb75b00146d915d5eeec29af419f866c789a1dd1107840f5226011a4c236d1a0f3d4411208e97891e83f460c33ce14d985b9fd5a6e5986e9faee22e96df6e90d055124695366ac1786e9b824610efad69a618b9bf2e236a81356b7d379d8f3ff0aafa43cdf5cab97226891d154a3b68dc7dd", 0x8b}], 0x1) r6 = memfd_create(&(0x7f0000000140)='selinux:eth0\x82\x00', 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000001fde), 0x4) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) memfd_create(&(0x7f0000000040)='u', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) [ 592.319328] audit: type=1400 audit(1575146936.139:1570): avc: denied { create } for pid=17059 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:48:56 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r6, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r9, r10, 0x0, 0x400000000088001) getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$inet6(r3, &(0x7f0000001840)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000003200000000000000000000000000ffff00000000939bfdb62368847262ce268766a5ee209240038dbb15fa5a180e7caba1e4123d9638148116000200fd00000000aec7686ca2bdfa39cfd80014f5b3fa9773cf52338187a9c76b3a73290eefee653146bf08fc9c55542e9900", @ANYRES32=r11, @ANYBLOB="00080080"], 0x79}, 0x42008810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r12) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r13, 0x1, &(0x7f0000000040)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r12, 0x0}]) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r12, 0x8983, &(0x7f00000001c0)) 20:48:56 executing program 5: personality(0x40000) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xe1201, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4008800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0xd4, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0xd4}}, 0x40) syncfs(r3) r6 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r6, r7, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = fcntl$dupfd(r1, 0x406, r2) ioctl$sock_netdev_private(r6, 0x89f8, &(0x7f0000000140)="18ca8e9d3841dc24d183067359966ce40d72b6467f325380d8f66791eba67715101f470612363e17987f2c987068ba9c60fa37541b1eed7b55d721b48ccbf48cfb2a52c46d68fffcf2aa1cc34c2c22c5a2d25f5e71c2d9cfac882ed2f75c17dd6d00ef8d05db0fc8b8caa98ff335164ce84b6d5d44b44a6585b954918d70441297df10cc0b02defe4d48164277f940be7ae2f546") ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) [ 592.760107] audit: type=1400 audit(1575146936.579:1571): avc: denied { create } for pid=17070 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 [ 592.905446] audit: type=1400 audit(1575146936.719:1572): avc: denied { create } for pid=17092 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 593.132078] audit: type=1400 audit(1575146936.949:1573): avc: denied { create } for pid=17093 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 593.252693] audit: type=1400 audit(1575146937.069:1574): avc: denied { create } for pid=17092 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:57 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='gid_map\x00') r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x3, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:48:57 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x5273c1d6fc50f5a6) pipe(&(0x7f0000000180)) syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, 0x0}, 0x0) r0 = socket(0x100000000011, 0x0, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1, @ipv4, @ipv4={[], [], @local}, 0x0, 0x3, 0xffff, 0x0, 0x4, 0x83950118}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10d000, 0x0) read$FUSE(r1, &(0x7f0000002200), 0xffffffda) socket$inet6(0xa, 0x0, 0x0) r2 = socket(0x10, 0x5, 0xfd) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040), 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r6, 0x2081fc) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) r8 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r8, 0x1000, 0xd2}, &(0x7f0000000300)={'enc=', 'raw', ' hash=', {'sha224-avx\x00'}}, &(0x7f0000000740)="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", &(0x7f0000000540)=""/210) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xf642e7e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) write(r7, &(0x7f0000000400)="ff38ffd7356ea9c8e8d66d78698115307e35be8b7b9c298bfe9478ef1685be5c03031c6551a9511ec9bce4c73f8a7597cca9ef685a6fd70eb6e040e481a0e3b2a4a78e48dea91fe541244968a3a886f2d8ff8db24792eadca8992182e5057fec32eeac706b327beaf4a14e0bf29c34fe102b492f64e60d704baa43a3c80d0000f328c244daf8791bc85229793bcb4d3d4ade369bc6fb2b41ef5c49ca30adfc0ca9667e079fd64b9b117b00f76124ba509db0935cd699d12353a9475790486e5afabd4bc3b7", 0xfffffdf4) 20:48:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0\x00'}) dup3(r2, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast1}, 0x0, r5}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x3, 0x20, 0x69df}) ftruncate(r1, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) read(r7, &(0x7f0000000000)=""/250, 0xedf1d44) ioctl$PPPIOCGIDLE(r9, 0x8010743f, 0x0) r10 = open(0x0, 0x141042, 0x0) r11 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r11, r12, 0x0, 0x400000000088001) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x7, 0x0, 0x8, 0x9}]}, 0x10) fcntl$setstatus(r10, 0x4, 0x40400) write$FUSE_WRITE(r10, &(0x7f0000000080)={0x3bc, 0x0, 0x0, {0x81}}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) r13 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000200)={0x8, 'bpq0\x00', {'erspan0\x00'}, 0x2}) connect$inet6(r13, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r13, &(0x7f0000007e00), 0x40000000000025d, 0x0) 20:48:57 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/238, 0xee) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='V./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$dupfd(r2, 0x0, r3) fchdir(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) open(0x0, 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) read(r4, &(0x7f0000000000)=""/32, 0x20) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x46800) syz_open_dev$mice(0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd(0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) readv(0xffffffffffffffff, 0x0, 0x0) [ 593.759067] audit: type=1400 audit(1575146937.579:1575): avc: denied { create } for pid=17093 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:48:57 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x248545, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'veth0\x00', 0x201a}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x3ffe, 0x4) sendto$inet6(r1, 0x0, 0xffffffffffffffad, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr="ffd6f1b9201348544de96b337da295b8"}, 0x1c) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0xfffffeb0, 0x0, 0x24f}}], 0x1, 0x2000, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)=0x1) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000080)={@mcast2, r2}, 0x14) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2cb04368b9fce6f1cd80cf775fd1a8b85a0084254f055fa1ee0671f82bf4449c9a09d59f6d50abcfdd7996529fdca7192e6eb2a24338697ba53a106443a21a37205021199487b03d60827ed2ccda3c8ce44c47705f544518c078864fbc4d14768f733fb1f7a100dee794a43f1f263bd8dd16825e3162c38c9f79c301c48d09746f646e85f4ae6124752e9fcbf10247bb2f07ea74152fb0dfd25f32182a1144ba6eb58a1b46e994ec4213879cf88f0b31c7cbf929d2c58e0ce9c48dde44066cd9d70d02a4ef08b2d825f23d7c216206e8498e7d1016a4e284ce99b925ae72c876e0a6bc88ed93816473e88b1c311d6f63a59a563cb8a175"], 0x6a}}, 0x0) tkill(r5, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) pipe(&(0x7f0000000380)) 20:48:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r4, 0x504, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf965}]}, 0x100}, 0x1, 0x0, 0x0, 0x4060}, 0x400e10c) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b270a280930a600000ffa84302910087193900090035000c00060000001900150005000000400000dc1338d54400009b84136ef75afb06000000000500c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 20:48:57 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setns(0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, 0x0, 0x200040, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x0) sched_setparam(0x0, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) stat(0x0, 0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x2005, 0x5, @mcast1}, 0xffffffb4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000481, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x0, @rand_addr="00d9006e0d007332c8b30009f400"}, 0x7d) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x6) sendto$packet(r4, &(0x7f0000000300)='\x00', 0x1, 0x3ffffff, 0x0, 0x0) [ 594.661479] IPv6: Can't replace route, no match found 20:48:58 executing program 2: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)={r1, r2+30000000}, 0x8) sendmmsg(r0, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2=0xe0000501}, 0x80, 0x0}}], 0x26, 0x0) [ 594.798357] audit_printk_skb: 9 callbacks suppressed [ 594.803515] audit: type=1400 audit(1575146938.619:1579): avc: denied { create } for pid=17122 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 594.837554] IPv6: Can't replace route, no match found 20:48:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x1000, &(0x7f0000000080)=0x0) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0xf, @broadcast, 0x4e23, 0x1, 'none\x00', 0x0, 0x8001, 0x5c}, 0x2c) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x21f}]) 20:48:58 executing program 1: eventfd2(0x0, 0x0) pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffe44, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r1, &(0x7f0000000280)="2d41c7d40547c3", 0x7) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4034abbb9b40212014a50f34"], 0xc}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000180)) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0xfffffffffffffffd, 0x23, 0x0, r3}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 20:48:59 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) select(0x40, &(0x7f0000000040)={0x1f, 0x6, 0x0, 0x0, 0x9265, 0x3f, 0x0, 0x7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x3f, 0x8001, 0x9}, 0xfffffffffffffffd, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='comm\x00') pselect6(0x19c, &(0x7f00000001c0)={0xfffffffffffffffc, 0x3, 0x5, 0x5, 0x8, 0x100000000, 0x10001, 0x401}, &(0x7f00000002c0)={0x3, 0x3, 0x5, 0x40000000, 0x0, 0x2, 0x0, 0x6}, &(0x7f0000000300)={0x0, 0x2004, 0x7fff, 0x0, 0x1, 0x40, 0xc03e, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={0x6740}, 0x8}) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$link(0x8, r3, r4) r5 = add_key$user(&(0x7f0000001700)='user\x00', &(0x7f0000001740)={'syz', 0x2}, &(0x7f0000001780)="16c857083c2d417c4c11bd3639c7bc78520dcb74e2c5f137d722eb54fb699b0a4c3f632074a57417b105a382992375c4", 0x30, r3) keyctl$get_security(0x11, r5, 0x0, 0xfffffffffffffe56) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r6 = socket$netlink(0x10, 0x3, 0xa) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x8000fffffffe) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f00000003c0), 0x4) getpeername$packet(r8, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000016c0)={'vxcan1\x00', r9}) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = inotify_init() inotify_add_watch(r11, &(0x7f0000000100)='./file0\x00', 0xfe) r12 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r13 = inotify_init() r14 = inotify_add_watch(r13, &(0x7f0000000000)='.\x00', 0x1) inotify_rm_watch(r11, r14) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140), &(0x7f00000005c0)=0x8) r15 = openat$cgroup_type(r12, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r15, 0x41009432, &(0x7f00000004c0)="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") write(0xffffffffffffffff, &(0x7f0000000640)="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", 0x1000) setsockopt$inet6_opts(r10, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="0002000000000000040100c910ff01001100000000b379f263379a177af8b0b259e5dbee00492a3dfec54984d30c0198d3ca990e8712a7ac3658c1007e6b9036229e10f6920a9b712486c396ed7d8938d61b829e69bd2c3ff32ffa79fbdb43eed3d1ffc21a53afc3887a4fb73a8fe6b707915332e9e27b2e1201008719d47e6902f4c881c43c0cef5679a939bbb019dccadf8d55a65867b9c0aec19bc801ebce2ee8321d9c204c4bf2bffe000000"], 0x1) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) 20:48:59 executing program 0: socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() r2 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xb8) [ 595.426582] Dead loop on virtual device ip6_vti0, fix it urgently! [ 595.481044] Dead loop on virtual device ip6_vti0, fix it urgently! [ 595.549285] Dead loop on virtual device ip6_vti0, fix it urgently! [ 595.565723] audit: type=1400 audit(1575146939.379:1580): avc: denied { create } for pid=17172 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 595.592629] Dead loop on virtual device ip6_vti0, fix it urgently! 20:48:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x4002}) fcntl$setsig(r1, 0xa, 0x3a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = dup(r2) write$P9_RREMOVE(r3, &(0x7f0000000200)={0x7}, 0x7) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r4, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r4, 0x0, 0xf1, 0x43, 0x0, 0xbd) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote}, 0x1c) listen(r5, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x4) shutdown(r2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r6, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r6, &(0x7f0000000180)=""/31, 0xffffffffffffff73, 0x100, &(0x7f00000000c0)={0xa, 0x0, 0x3}, 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r5, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0xe6) r10 = socket(0x1, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000040), &(0x7f00000001c0)=0x14) sendmmsg(r9, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 595.637651] Dead loop on virtual device ip6_vti0, fix it urgently! 20:48:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080)) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1, 0x0, 0x0, &(0x7f0000000040)=[@dontfrag={{0x14}}], 0x18}}], 0x2, 0x0) [ 595.690078] Dead loop on virtual device ip6_vti0, fix it urgently! [ 595.911321] audit: type=1400 audit(1575146939.729:1581): avc: denied { create } for pid=17179 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 596.316863] audit: type=1400 audit(1575146940.129:1582): avc: denied { create } for pid=17179 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 596.808841] qtaguid: iface_stat: create(lo): no inet dev [ 596.814447] qtaguid: iface_stat: create6(lo): no inet dev [ 596.874706] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 596.898357] qtaguid: iface_stat: create6(lo): no inet dev 20:49:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000040)={{0x2, 0x0, @identifier="c653728231f013c083ee861d9a06bd28"}}) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x10) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) fcntl$setpipe(r5, 0x407, 0x53) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000400)=@v2={0x2, @adiantum, 0x3, [], "5b7502d71799e9141c148a86f7a04875"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x5, &(0x7f0000000380)={0x0, 0x14, 0x0, @thr={&(0x7f0000000140)="60dd083328c67f24fe60c0953cf8e1ad0f8fbb09d4247600b44da2982b6c542617db62a662b927fca72f0beb9bbbb224d15c21762a65ea5c43b9ca010677efcc81ca9a3334a7f4d15f122a43fde8", &(0x7f00000001c0)="fd39368b049714f46eefa00f7bb42f9ef77148878959150e992c"}}, &(0x7f00000003c0)=0x0) timer_getoverrun(r6) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) 20:49:01 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$dupfd(r2, 0x0, r3) fchdir(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000400)="f0255833398d18b9795ac9714175180ce12f0a8f3a74455d4115bb1099922fda19e339919d0018d2dfcc1e4da42e3aeb6b7a6780161ddb186e9dd340eefa423c1849e3fc272ed8bbe8b8a12e190deea4cc6dadaa945d069d82a75e478442fb70fca7d072496761f4f1c981ccab339424cf0a4f66da160bae68d18995647525f33ab80a8df50c325b2f96493388700233e1742c0303dd4f638011da04a695e1e275") openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd(0x0) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) readv(0xffffffffffffffff, 0x0, 0x0) 20:49:01 executing program 2: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x9cX7\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\xad\xcb\x859\xca\x1d*e7\f=v \xb6\x990:\xa4\xc2R|\xb9ZOYf\r3\x8e\x01\xa3gl\x1b=\xde\xd9\xc4K\x00\xd6\x12\xd6\x17\xaf\x1f\x98\xd8\xab4V\xb4\xbb\x8b\x95o\xdd\xd8\x1b\t@A\xc4\xc5\xfc\xdeZc\xefK\xf9\xcb\xa0\xf8+\xd1\x99[\xfb\xd1/\x8e\xf1\xd4\xe0NzX\x1c\xc9\xd3\xbb\xd1\x86\xd9\aS\x10~\xf1\xe5@I\xc5\xf7\x86\xa4', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) sendto$packet(r1, &(0x7f0000000000)="b773702cd880fb709d25f8f328ae99844c25e73faaf776045d9d9a2b77fd499e095170ea632e3be127366d6922605c2be6e659a87b2d15a023ed60513041152a759d07fb42c4", 0x46, 0x40, &(0x7f00000000c0)={0x11, 0x15, r7, 0x1, 0xe, 0x6, @broadcast}, 0x14) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x2003, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:49:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) r4 = fcntl$dupfd(r3, 0x876dceb14363541e, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 20:49:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r3) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20008088) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000140), 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) r4 = getpid() openat$keychord(0xffffffffffffff9c, 0x0, 0x44800, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) dup(0xffffffffffffffff) pipe2(&(0x7f0000000000), 0x4000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') [ 598.107502] audit: type=1400 audit(1575146941.929:1583): avc: denied { create } for pid=17211 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000100)={{0x32, @multicast2, 0x4e24, 0x2, 'wrr\x00', 0x0, 0x101, 0x7f}, {@rand_addr=0x1, 0x4e24, 0x1, 0xc06, 0x3f, 0x4}}, 0x44) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000700), 0x4) 20:49:02 executing program 1: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet(0x10, 0x80003, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffffffffffff01) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000000eb40)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f000000ec40)=[{&(0x7f000000ebc0)="a1c6e8f331d9c047d51158fb67e571238ba8ae5082749f933f79bba1bf9036685003acafbbfd6de1e1c03f5e835d90b7af0e0d85", 0x34}], 0x1, &(0x7f000000ec80)=[{0x40, 0x0, 0x300, "857eab923541a97c95c7248932c98917ab101bd76b5800aa2baec82edd84f4a86a3ea51a39ac7999811f"}, {0xa8, 0xac263a820e23e2ed, 0x43, "d9da910b578e8631db494b7c56161755c8d0413a2758a4baec768a22bd598e2294a6268ba556c77508c2c9d796e217c67c7917f315dd7e0ddd817bfe15bf6c30d7c3729c4128669259989f58518de040dfb74244066f01c2318602fd150a49d56f843efc4d808a1b4f2692a1d95e7b911611f368bc03f98b023139af266724f24ba67bb84a4e25d963263ff8a404a69a93e0"}], 0xe8}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = add_key$keyring(0x0, &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r8) r9 = add_key$keyring(0x0, &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="2b24d6fc806704d67bff61f17d0bfe67c22022249d67ffddd7bb59b6466de07602ef6f4a6fe4e700560130c1e7d31558", @ANYRES64=r10, @ANYPTR64, @ANYBLOB="b3304e020f19fe839dc13de7d3441d90c355c75ed5319439f0a05ec3", @ANYRESOCT=r9, @ANYRES64, @ANYRESDEC=r5, @ANYRES64=r6, @ANYRES16=r7]], 0x8}}, 0x24000886) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:49:02 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e70e) getpeername$netlink(r1, &(0x7f00000000c0), &(0x7f0000000340)=0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) mkdir(&(0x7f0000000400)='./bus\x00', 0x101) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) setxattr$security_evm(&(0x7f0000000440)='./control\x00', &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@v1={0x2, "106a"}, 0x3, 0x0) sched_setparam(r6, &(0x7f0000000140)) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x11) fcntl$setstatus(r7, 0x4, 0x6100) set_tid_address(&(0x7f0000000040)) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0xfffffffffffffffe}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r8) r9 = fcntl$dupfd(r8, 0x0, r0) ioctl$TIOCSTI(r9, 0x5412, 0xdc) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000000)=0x11000490) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x11afea34) socket(0x0, 0x0, 0x0) r10 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0) mkdirat(r10, &(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 20:49:02 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000001600)={0x0, 0x8000, 0x5, 0x101, 0x9, 0x31aa}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f00000011c0)=""/245, 0x9c) pipe(&(0x7f0000000000)) syz_open_dev$loop(0x0, 0x4, 0x51d00) write(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001640)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x1, 0x20, 0xeb30, 0x3, 0x38, 0x7d6, 0x2e6, 0x40, 0x1df, 0x7, 0x9, 0x38, 0x1, 0x5, 0x0, 0x1}, [{0x5, 0xea, 0xd73d, 0x8, 0x6, 0x1ff, 0x48, 0x3529f2f9}], "48dbe1d76c62c5bd37ddb38233ee43c18b758ba200edb3727f4f170669da98f27a6b3481f7d82b4b286345b845b181d02640bba4fa40712071abb2ce482e3942558cd18c249873c32e3829316456d7e36f4d757218cc2da0f4ace00506"}, 0xd5) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESHEX], 0x4240a5bb) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f00000013c0)=""/257, 0xfffffffffffffe7c) fcntl$setlease(r2, 0x400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r7, r1) sendfile(r5, r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) [ 599.197612] audit: type=1400 audit(1575146943.019:1584): avc: denied { create } for pid=17212 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:04 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a76, 0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x200000, 0x0) ioctl$TIOCNXCL(r3, 0x540d) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40000101042, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f00000000c0)={{0x0, 0x0, @descriptor="ad18f62c28443ddb"}}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000000)="fc000000480007a014b8f312a52946000aab07ff010000000000920821000100ff0100400005d084e22a040009039815fa2c1ec20800aaa79b274b59fe8585ecbc0002", 0x43) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:49:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000580)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, {0x306}, 0x10, {0x2, 0x0, @broadcast}, 'veth1_to_bridge\x00'}) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000140)=0x6, 0xffffffffffffffe3) r4 = socket(0x18, 0x2, 0x3) connect(r4, &(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x2, 0x4, 0x31, 0x80, "15d0f8f238b5c51bbef4ca856c7afc4d0e0c940e5c816a36d1ca9a9028ee9f5f437d803c8623c65c3cb58ff542be1975c07b0c0a481fc5c440b52091f575d0", 0x2c}, 0x80) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x80, 0x5) r5 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r5) r6 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x6, 0x105082) r7 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x80ffe) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed6) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r8, &(0x7f0000000180)=[{{&(0x7f0000000080)=@nfc={0x27, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x381}}, {{&(0x7f0000000100)=@x25={0x9, @null=' \x00'}, 0x80, 0x0}}], 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x1) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000740)=ANY=[], 0x0) r10 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x0, @local}}, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x3, 0x0, @local}}]}, 0x310) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) 20:49:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x9002}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000013c0)) 20:49:04 executing program 2: r0 = getpid() tkill(r0, 0x13) r1 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000005374f83d6280ccb9030006"], 0x13) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 20:49:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c340", 0x2, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'hsr0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000600)=""/146, 0x2e6}], 0x1}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) connect(r5, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x2, 0x1, {0xa, 0x4e23, 0x3, @empty, 0xffff}}}, 0x80) [ 600.845835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 20:49:05 executing program 4: pipe(0xffffffffffffffff) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={r2, 0x0, 0x1000, 0xffffffffffff0001, 0x5}) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000001200)=""/208, 0xd0}], 0x5) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x3f) ioctl$TIOCNXCL(r0, 0x540d) 20:49:05 executing program 0: socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r1, r2, &(0x7f0000000140)=0x4, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="54010000100013070000000000000000ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000000b6632f980000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003300000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000200000000000000000000001c001700240000000000000000000000000000000000000000000000480001006d643500"/268], 0x154}}, 0x0) 20:49:05 executing program 3: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) r3 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat(r4, &(0x7f0000000140)='./file0\x00', 0x43, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r6) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r6, 0x0, 0x12f}]) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) write(r4, &(0x7f0000000500)="84bf49826b0396d5942e7d894948ddcc08ab28ff0f0000000000004de27c2997a21ef5bd8de95d0dc84fd2b0ce3586467d63cda1e7953923cb1acc3b620972518f55735efd5e67bd9913c21cfbaad90c4fbd90243095b57dccc94bd7c53aacf6f0", 0xfffffffffffffdaa) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r10, &(0x7f0000000040), 0x8000fffffffe) writev(r2, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r11, 0x24, &(0x7f0000000100)={0x2, 0x1, 0xd95, 0x20}) fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$inet6(0x10, 0x8000000100000003, 0x0) dup2(r12, r13) r14 = socket(0x5, 0x0, 0xfe) getsockname$packet(r14, &(0x7f0000000040), &(0x7f00000001c0)=0x14) sendfile(r2, r10, 0x0, 0xa5cc554) 20:49:05 executing program 4: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000080)=""/164) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept$inet(r4, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) accept4$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14, 0x9cbdde9e74e3f749) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000480)={r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0xc) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 20:49:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x7fffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb8}, 0x8}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xe31, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x8}, 0x0) 20:49:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x20) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x19) fcntl$setstatus(r0, 0x4, 0x80000000002c00) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000180)="15bdd379830755615b7e6383d3691da9e3f3013eb4f5a59f08bfa552a478884e6eea742ba12273c1d00855855df02f151cf9759832871f67bf8d1dd0c81b95464307d4f85fbbf40ac40da5a333fe6bbfaea876557e75a45296d89e614e60d3e9c6df2a82a9c2643855cbbee44e9daef6c5e9d78c3531aec70d3ea9be6768cd25d9fe0f02a4306a3d51dd8159aa761072b14bfc61f0d3804a1b2beec700e7ba647a5062795272407e805739c1bfd544cb6d197bd7e03239413da7bbe3bd992a5d63005fb56256e65e0176effe106a9d0d9be5b52e6f2a9ce8d3215e5d69be151b70e269d7628da98d8776e2870bc00271de9017cc284fe16f", &(0x7f0000000280)="7e1b1ecb041d02aab39850c55f974b08055495b655bdc35417f99b268ddd4e713ebeda8a4d242ef74ae393f7ae0111b94e2b6a4be7e7f63e2cd2efbb52400f9bde51ddb9b28583bfc7fb3d602a569662661d544ac884cae16f6d513848d1add9a1dc33ceb2a10049e04f4c01c2780574bc689b6c549edc97f8dcbf82570e28617b2224e5dcf8601464ad8e2a86961d1bb467dfc0e3040577bf5fe9a760d1ed6d511b19512d86f46fe49422b01001954638ac0d3e9f06bcf08557b9034fab59189a18d8053c8ed6893d07521bbe7eda8d3b6edeb802605b4841154ca99da849fd6ce66d4d48e5201895fcb76ecaceef0e561b36bf3b15"}}, &(0x7f0000000100)) 20:49:05 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='z\x1a\xae\xe6\xa1\xd8\x9aM=/\xc7O\x8et~\xb5\xb1C\x87\xd4B\x97\x9e\x13\x04\xacG\x99\x16\xed,\xbd\x92\x9b\xd3P\xa5\t\x00\x00\x00\x00\x00\x00\x005\xd8Ep\xfd\xa7%\xfbQ\x7fIc\xd0\x95y-w\xe7\x98\xac\xe7\xcb<\xbfr\xecP\x94_\"\x84\xec\x916I&9\x11\t\x9a\x7f\tNv\a\xe0\xec\xcf\x0e-\xb0\xd0\xe8\x1e6\x95\xf8\xf8S_G.\xe8Pp`_Y~\xb7d\xbf\xf1g\x0e\xd3\xa1\xf1J\x8e\xf4\"WV@\xe3\xeaB\x15e5t]\xe6\xe0\xe8\x00\xd3\x81\xe8\xb0\vX\xb2\xbfs\x96\xbf\x9c\xc8Q\xf6\x12y\x03\xd7\x96\xcd\x1e3(\t\x98\xab\x1c\xf1u`\xf9Y\xa4i&Ee\xe8\\\x0eU\x01WKw\xd1\xdc\xf7*\x1d\xdcWRq\xbe9t\x93\x93z\xa1\xdb@\xccjf\xd4\xfa\xaa\xa6\\\xfbV\xc9\xa8\xd4{\x90R=\x13\x92\x0e\xfb\xe9\x19\xbe\xd5\xd7~_\x06Y\x19\xfcEfp\xd48\x8f\xb1.\x82_\xa4G\xbf\tsK\xa6eN\xe09\x7f\xd5\xa47s\xc5bU\x03;\xf4_\x92\x80tK\x8c\xa9\xff\xc3\xbe+\x86\xaau\xfd\a\x97~\xf4\x0f\xc6\xff\x19\xd2B\xb6DB\xd0ey3 c\xe2\vfn2:u\xc2\x8c\xf8\x14', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) lgetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)=@known='security.apparmor\x00', &(0x7f0000000300)=""/52, 0x34) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mlock2(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e20, 0x5, @mcast1, 0x100}, {0xa, 0x4e22, 0xfffff801, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6f49}, 0x800, [0x401, 0x2, 0x5, 0x8, 0x8000, 0x101, 0x1, 0x9]}, 0x5c) 20:49:06 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4000, 0x200100) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x74) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) write$P9_RREADDIR(r1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/1231], 0xdb) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000240)=0x656, 0x4) ioctl(r1, 0x4, &(0x7f00000001c0)="11dca5f3968646f24cd9055e0bcfec7be070") setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0xfff, 0x4) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4)={0xa, 0x4e22}, 0xfffffddc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000c14, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/111, 0x6f, 0x1, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @empty}, 0x717000) request_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='icmp\x00', 0xffffffffffffffff) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r5, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="318533735b5bae", 0x7}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) keyctl$invalidate(0x15, 0x0) sendto$inet(r0, 0x0, 0x198, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0xffffffffffffff65) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) shutdown(r0, 0x1) 20:49:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) fcntl$setsig(r1, 0xa, 0x3a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000200)={0x10}, 0xffffff9a) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r4, &(0x7f0000000380), 0xfffffffe) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r3, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) socket(0x1, 0x2, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x80, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x10}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="66e329c7949daacfcde122b5862fe9b0"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 20:49:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f00000002c0)={{0x2, 0x0, @reserved="6a8be541a79cccadd3e495e858cfae96dd9df30bb1f1936242f399b7160e8996"}}) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r1, 0x1c08) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x20010, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RREADDIR(r5, &(0x7f00000001c0)={0x47, 0x29, 0x2, {0xfffffffc, [{{0x19, 0x2}, 0xffff, 0x1, 0x7, './file0'}, {{0x10, 0x3, 0x8}, 0x8, 0x2, 0x5, './bus'}]}}, 0x47) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'U+', 0x800}, 0x28, 0x2) write$FUSE_LK(r3, &(0x7f0000000040)={0x28}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8) [ 603.402543] audit: type=1400 audit(1575146947.219:1585): avc: denied { create } for pid=17321 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) r3 = eventfd2(0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) fstat(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x8, {0xd0, 0x1, 0x6}, 0x100010014, 0x0, r4, 0x442, 0x10002, 0x42cf6d26, 0x9, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1f, 0x7, 0x0, 0x0, 0x0, 0xea6}}, 0xa0) getgid() pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r6, 0x29, 0x0, 0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000680)) r7 = eventfd2(0x0, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000000)) fstat(r7, &(0x7f0000000680)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x2000, 0x7, @loopback, 0x80}, 0x268) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r10, 0x280080) r11 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r11, r12, 0x0, 0x400000000088001) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000100)={0x0, r9, 0x0, 0x0, 0x3}) 20:49:07 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000040), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @mss, @sack_perm, @sack_perm, @sack_perm], 0xdcfbe) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000200), 0x4) fcntl$setstatus(r4, 0x4, 0x42803) 20:49:07 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r4, 0x0, 0x400000000088001) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000000)) ioctl$TIOCSCTTY(r2, 0x540e, 0x883) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/199, 0xc7}, 0x0) sendmmsg$unix(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB], 0x18}], 0x1, 0x0) 20:49:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000005e40)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1000}) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x38308bf734abe031, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xc3) 20:49:07 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x5, 0x101, 0x9, 0x31aa}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000001500)) r2 = syz_open_dev$loop(0x0, 0x0, 0x51d00) write(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x8000) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) pipe(&(0x7f0000000300)) io_submit(0x0, 0x1ae, &(0x7f0000001840)=[0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x2000000000, 0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x2, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001a00)="1955ed44daafdf2c1fbe2cdc9333032967022b00ff78a38cff9a746bbe6ae7648045c4d2f1a5fc0ce912a57ef32bd8031b7032c5c302c6e7d505a6d16367d5ad00840299fd09727dca0500a6a9003225e8723cdb1bbbfd0df24bad23559aa10269dd7aae7c5b203a52daeb73c7e9798620d75dc658d8ecd56afdf0106c6ed6236e39eaed6bb147f4a46e1d038949ba031437d1dcaf0ab213da7ef3d0f9d501da95116a80c1fb77828bafb415501abf87de4e1d1c00ce31a26ccdeb20709abe0d0ee9130e7de81f63e242792ecf34ce85fc2eb298142b1af4b11b5913c4797d29ed839a224744723522e7f8ff9bcf0000e0d86a177559582a21442b53205fb181943ecfcf7416ad285ae585f82a19276f627e4f04f4030324db1c37ebd8d400f24415bb8e1b6d1e9994cd6b9c778e12db1421624c5388f7f81d58c6974fdd091d940a7ca7984d2d3c32dbc6fee43dc29de765c5d58e9c7058c9cd7a30ded89217278cd685d24ed536f07ea572e2b74379e3c8b2842c1602b4101fc00409babfe294e7a3b3047dc3980a22c1477d82f9d484ce724cb93958598f27317adc9f4d1a4170305e4c4a26e687f959980600000000000000d51b9df61494733f8d574360d16e415a1e835c944b989ee6f87ada", 0x4bc, 0xdf9b, 0x0, 0x3}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x8, 0x63, r2, &(0x7f0000002380)="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", 0xc95, 0x2, 0x0, 0x1}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0xd57ea18703433360, 0x8, 0xffffffffffffffff, &(0x7f0000001640)="b6db78d7f4ba81314af85f29b659359d8d5f31366fda534a66bc58fd444ba1fabca895cb7b4662fb7e5d4700f34192ad02acd240b6ef501f4c32c1efd7bd860f692ad534683c3ebb4f9b965e9c7e0b47a144dd300b8860cb21fa2cf15a1392fc28ef4febed55c8d6afb40926af543af19bbbf85907585679ffba52d65c0f80f7d4cdb98d93fef78c0765cdadcfd28f33580266b3da59bfb761cb476ecf0000000000000000", 0xa5, 0x9, 0x0, 0x2}]) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000015c0)={0x0, 0x6}, 0x4) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r6, r1) sendfile(r4, r5, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 20:49:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), 0x0) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) getgid() pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r6, 0x29, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000140)="2ce18e9098de51dca558c5931a7973502af53b2b66e8895753e0dec1", 0x1c) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'ifb0\x00', {0x2, 0x4e24, @multicast1}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000400)='security.capability\x00', &(0x7f00000005c0)=@v3={0x3000000, [{0x8}, {0x6e, 0x71f40d98}], r7}, 0x18, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) 20:49:08 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070100009200000e0000000000000000000000000000000008000000000000000529"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r5, 0xa, 0x12) recvmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x16) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/ipc\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x13a) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 20:49:09 executing program 3: clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0800000000000000ffffffffffffffe900000000000000000000000000000000030000008c0e39a8a6515de9f6a8f48ba82e0977db7a06ac98e73d518b3b663d2e002c1a1af1c04e97bc7f0e5804da5ba8c118bc1f8cbe45c1a6b6abdfcba5baf2e6c8f1674d35a0b0da1169afe0cd088a1caba0335457bd0d00259c1335ba3e5e4437cdc33e46"]}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffff60b, 0x2, 0x3, 0x9, 0xd46, 0x2}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) epoll_create(0x4) openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a748844f02c97573373c76efd146373f2aaf296fc06065478d7a084c6ff8dabab21b9c9aa70180810086d7839a5956537934dc76551921d0a46dcd996ca1406ad49d7f3d3066e90c4c8c418f5f31ba6df7fc6fc1c754452c8eac0d0ad080b28efc0076619e3d2995fb00000000c653244e7e9abc3e52da94ceefe1b5560453206cf3de8a35404cd6ed1f955cf9a34e6d5ff53e50ebec78f1dcc4ab2d225f2a7f7c556a4482dc340caf284ad11af4d0367b9b9c8c69ff45889c01543c841b63939f6255fe47355d73f28b36da3f9e4d4240f99d3b7d6860e455b600bb005e570e5cc72522f707aedd693193c430b4ea1139fb9c14393055c480aa3c4354d89617dd52cda6fe2edc0647f6030fc6f6a51010800d80762e956ee948f20d53ddad17b5a0b2e1a7727d4cc2531d447680817a52e93f35948efe8457bf533250722902c77f57c74c71173115ea4ec2460883013fc61e322da8aa41ee008e6cb65562c2e4ec35d577aa835ab85354d6c5d4450a188a1af978a40fa6b85c057e1e0a79c11d02afd12fd70fb4d23f5d3d5b1cc6cbaefd12d830d85c6b562b1633d9d7db8f047597a7e14978752b881dbeb8c4a896368ae8ec0957f2a3f1e3fd2c999e3fa1d80f48702fff4495de2bfb6c2ca03d89b9325363"], 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x4ba, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) inotify_init() socket$unix(0x1, 0x1, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) 20:49:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0), 0x0) 20:49:09 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ke\x01\x00\x00\x00rd\x00', 0xde46, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x36) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000140)='./file0\x00') getsockopt$inet_int(r2, 0x0, 0xdc033c50439b933, &(0x7f00000001c0), &(0x7f0000000040)=0x4) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f2, &(0x7f0000000380)) write(r4, &(0x7f00000001c0), 0xfffffef3) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222a74884cf02c97573373c76ded146373f2aaf296fc06065476c7a084c6fffdaaad01b9c9aa773ae810086d7839a5956537934dc765519218c416dcd996ca1406ad49d7f3d3066e90c4c8c418f5fdf82717354d38888c0a612ac2456d38831ba6df7fc6fc1c754648275fd0d0ad0e4f5f5ab6e7b42bd53b2a0a9ebae9c19adc637b64cc9e911aefa369082b8127cb1f95b0a0cfa939da714381f31ebcd1c262d35efb9b008c40de80b17b8bea8d3f78f769934dbc50f4b8dbb8ef51eaa7e039f1c8d69058700bdb7650c56580672f0e3dddc6ebc9a65b41101dd94fba64559c818cecf97ea8eb3"], 0x1, 0x2) read(r3, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0x0) r6 = inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000080)=0x7042) sync_file_range(r6, 0x5, 0x9, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/de/ptmx\x00', 0x419001, 0x0) socket(0x0, 0x2, 0x0) 20:49:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESHEX], 0x4240a5bb) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/s\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'erspan0\x00', r12}) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2400c000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x1c0, r11, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2c}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8001, 0x77, 0x96, 0x81}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xf47d}}, {0x8}}}]}}]}, 0x1c0}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000011c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f00000012c0)=0xe8) getsockname$packet(r9, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) r16 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r16, 0x10, &(0x7f0000000400)) fcntl$setstatus(r16, 0x4, 0x6100) r17 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r16, r17, &(0x7f0000000040), 0x8000fffffffe) writev(r16, &(0x7f0000000680), 0x0) r18 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r18, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r19}, 0x14) getsockname(0xffffffffffffffff, &(0x7f0000001480)=@can={0x1d, 0x0}, &(0x7f0000001500)=0x80) sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000001780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80001400}, 0xc, &(0x7f0000001740)={&(0x7f0000001540)={0x18c, r11, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r14}, {0x124, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xba6c}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r19}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r20}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x2401088d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r22 = dup(r21) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) getsockopt$inet_pktinfo(r22, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @loopback}, &(0x7f0000000240)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@mcast2, 0x0}, &(0x7f00000002c0)=0x14) r25 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r27 = eventfd2(0x0, 0x1) fstat(r27, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r29 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r25, r29, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r29, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r26, r28}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r28}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r30) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r31, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r30, 0x0, 0x12f}]) r32 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r34 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r36 = eventfd2(0x0, 0x1) fstat(r36, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r38 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r34, r38, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r38, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r35, r37}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r37}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r32, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r33, r37}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r30, 0x8933, &(0x7f00000004c0)={'vcan0\x00', r33}) r40 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r40, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r41 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r40, r41, 0x0, 0x400000000088001) getsockopt$inet6_IPV6_XFRM_POLICY(r40, 0x29, 0x23, &(0x7f0000000680)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000500)=0xe8) r43 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r45 = eventfd2(0x0, 0x1) fstat(r45, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r47 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r43, r47, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r47, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r44, r46}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r46}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r48 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r50 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r52 = eventfd2(0x0, 0x1) fstat(r52, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r54 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r50, r54, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r54, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r51, r53}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r53}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r48, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r49, r53}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000880)={@dev, 0x0}, &(0x7f00000008c0)=0x14) r56 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r58 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r60 = eventfd2(0x0, 0x1) fstat(r60, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r62 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r58, r62, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r62, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r59, r61}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r61}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r56, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r57, r61}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r63 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r63, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r64 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r63, r64, 0x0, 0x400000000088001) r65 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r67 = eventfd2(0x0, 0x1) fstat(r67, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r69 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r65, r69, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r69, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r66, r68}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r68}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r63, 0x8933, &(0x7f0000000900)={'vcan0\x00', r66}) r71 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r73 = eventfd2(0x0, 0x1) fstat(r73, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r75 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r71, r75, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r75, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r72, r74}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r74}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r76 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r78 = eventfd2(0x0, 0x1) fstat(r78, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r80 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r76, r80, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r80, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r77, r79}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r79}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000940)={@dev, 0x0}, &(0x7f0000000980)=0x14) r82 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r84 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r86 = eventfd2(0x0, 0x1) fstat(r86, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r88 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r84, r88, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r88, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r85, r87}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r87}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r82, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r83, r87}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r89 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r91 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r93 = eventfd2(0x0, 0x1) fstat(r93, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r95 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r91, r95, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r95, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r92, r94}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r94}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r89, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r90, r94}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f00000009c0)={0x9c4, r11, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x1d4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r24}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r26}, {0x140, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r39}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r42}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2b3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r44}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r49}, {0xb8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x258}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x300000}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r55}, {0x8c, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x6, 0x1, 0x8, 0x3}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r57}, {0x188, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x85f4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r70}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r72}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r77}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0xffb9, 0x2, 0xcd, 0x6}, {0xfff9, 0xff, 0x8, 0x401}, {0x9, 0x3f, 0xff, 0x20}, {0x8000, 0x80, 0x7f, 0x9}]}}}]}}, {{0x8, 0x1, r81}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r2}, {0x224, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r83}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r90}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x9c4}, 0x1, 0x0, 0x0, 0x10}, 0x0) ftruncate(r6, 0x200004) sendfile(r1, r6, 0x0, 0x8000fffffffe) socket$inet(0x10, 0x10000000003, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r96) 20:49:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r6 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) eventfd2(0x0, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000600)) r9 = syz_open_pts(r8, 0x0) read(r9, &(0x7f0000000080)=""/11, 0xb) fstat(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r11, 0x200004) sendfile(r6, r11, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf0200020000000000800000000000000001", @ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="b06bd6f810bc00000c001c00e4abc18500de4969eb430954ab725f43ddb587d7f62b8a9c8933d9e142510dbab7fb9ae6002c3924621f7873fe361a8bbfc6dadc395a6e4e6f7a4d73c9b0d90f91e2f7ce52c503ceda95317b0ee8f3e2091a2a39cffa984a5001d1c54aa0be467ef6539bd224c090e08527fdc087c01b536e0ab0c6d7bf4457a7e32218e0d065b69be89129859baf24d6776729f61fff50d3c1f43ea7de49aa62330a55c8525f9aa9e1f7faf561dcd10f2cec2ffbb7cdd502ce3f0f52d56710f4c8b65c2031394cb5e7a4f8b24d57cfe9dd16603cfd99d12b4f35cdfa474793e4df761190a97c569bb30928480b4ac336ef82f98c9b8e1a0343020ec7ea4a18f1000000000000", @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000300010000000000"], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x8) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000380)={0x0, 0x1f, 0x0, 0x12000000, 0xea, "f1a2c58cac7b90f916d7f28de792593063c5dd", 0xffffff2d, 0x22}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'\x00\b\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timerfd_gettime(r2, &(0x7f0000000100)) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000003c0), 0x4) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x7fffffffffffebb, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r12, &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000440)='y\x00', 0x2, 0x1) [ 605.547956] audit: type=1400 audit(1575146949.369:1586): avc: denied { create } for pid=17378 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 20:49:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000003e80)=[{0x1c}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 605.685648] audit: type=1400 audit(1575146949.499:1587): avc: denied { create } for pid=17386 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:49:09 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000100)={0x3, 0x2, 0x3ff, 0x5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x2000, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) umount2(&(0x7f0000000080)='./file0\x00', 0x4) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') [ 605.981270] audit: type=1400 audit(1575146949.799:1588): avc: denied { create } for pid=17386 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 606.036153] audit: type=1400 audit(1575146949.849:1589): avc: denied { create } for pid=17386 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 606.139563] audit: type=1400 audit(1575146949.949:1590): avc: denied { create } for pid=17386 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 606.199068] audit: type=1400 audit(1575146950.019:1591): avc: denied { create } for pid=17402 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 606.282509] audit: type=1400 audit(1575146950.099:1592): avc: denied { create } for pid=17402 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 606.306766] audit: type=1400 audit(1575146950.099:1593): avc: denied { create } for pid=17378 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 [ 606.333624] audit: type=1400 audit(1575146950.159:1594): avc: denied { create } for pid=17386 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:49:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x0, 0xfffffffa}}, 0x20) ioctl$UI_DEV_CREATE(r1, 0x5501) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x7ffffe, 0x11, r4, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 20:49:10 executing program 5: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x4, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(0x0, 0x0, 0x40000) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f00000001c0), 0x8000fffffffe) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) io_setup(0xb0, 0x0) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_procfs(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendfile(0xffffffffffffffff, r6, 0x0, 0x9b6) fcntl$dupfd(r4, 0x406, r6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='projid_map\x00\xba\xb6\x10\xe1\xc9\x18+D\x80\x95#\xc5\x9c\x04\x00\xfa\x88\x02e-\xd3\xb7\xe4\xfb\xd7E\xd1c@\xfd\x1d\x105\xed\xa65H\xee\xac\x85\x16L\xcf\xb8\xe6\x9e\xee\xd2\x8f\x8a\x9b,7\xd3\xca)\x13W\xe1\xa2Y\xb1]!S\x1ay\x15-R\xe6\x13.f\xf5\xd65\xf8\xed\xe1\xb4\x12I-\x05\xbe\xe0\xe2\x1b_\x80\x89E@\xea\x82`{M\xe9x\xd0\xda3W9h\xe9\x17\xf7\f\x82\\\xc2\xfb\xd8\xf9\x8a\xf2\xbfJe.\xa8\xb0w1 \xd9Z\xad\xd4\x85tHn&\xf3\x12\xf5\xf1\x9f\xa8\xces\n\x06\xe6\x8c\xce\xe7\xeb\xeb\xdd\xe7\'\xd6\x98o\xccF\x9f_pMbXF\xb7\xb5\xb3F%\x94\xe2\x83\x11\xdb\xe5\x15q\xe1\xe3\xe9}O\x96\x91t@\x94O\xa1\x90=I\x9c\xce\x7f\xa9Iz\x86l\x05$AW\xe6p9\x99^\\={\xc4\xab\x93\xef\x89*^8Ki\x03\xafn\xaa<\tn\x8a\xe3\xa7\xa1\xc7\xabeEg\xcf\x81\xd9\x89\xe9T/\x113*11\xabT\x05\xc6\xb0\xbf\xb7\xbe\xcddw\xd8\xcd\xffhXK\xbc7J\xbdw\x9f\x98}}e\xff\x87\x87\xd1\xfeP\xb5\x8cY+\rwR|\x15\x9a\x84t\xfc\xc0\x121\x89\x95\x18\x91.\xf8\xea\xe5\xaaE\xd9*H\x02l\xae\xfd\xd2\xe2\xf8\a\xda\xe0c\xa3,\xc0B\x8c\xea\x1cJ\x97\xf7\x9c\x06Y\xc2\xd0\x14mQN\xac\xe3\x9f\xe8\xbb\xad\xa5\x06\xc3.\xd8\xb0\t\xa7\xb6v\xd0\xf8r\xbf\xc1\xa0,kS\x13\x16G\xd4\x8f\xd3\xa9|\x97;Um\x80<\xd5\x89Au\xa1Ny\xb2\xff\x949k\x0fh\xc4\xd2w\xae.\xcb\xcf\xe5Kf\xc3\x93\xe4\xf5\x1262\x8d\x1f\x8e\xaay\x80N\xbd\xaf\xe6I\xa5^\xe6\xcdo\xf02\x82\xb4e\xed\xf6\xb6q}\f\xf7\xe4\x0e\xa2 a\xdco\xa3\xbe3\xe0\x83=^E\xd3\x90\xccd\xed(1\xb5\xca\xd6t\xaf\xca\x97\f\xd9\x91\xd2>\xfc\xca\x95\x17\xcd\x0e\x190\xcd\xebBV\xf1\x92\xe2\xe1\xf2\x7f`/\x16\x83\x9a\xe1\t\xe6\xbfb\x9a\x8b\xd9\xb7^H1m\xd0l\xd1\x1ec+i)\xd5\x8c\xe9\xae1\x7f\xaf\x05i,') sendfile(r8, r7, 0x0, 0x9b6) write(r8, &(0x7f0000000b00), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r1, r4, 0x0, 0xa5cc554) r9 = socket$packet(0x11, 0x0, 0x300) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180)='system_u:object_r:klogd_var_run_t:s0\x00', 0x25, 0x2) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140), 0x4) 20:49:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x0) ftruncate(r1, 0x200005) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00', 0x4fff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00', 0x4fff}) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r6, 0x0, 0x400000000088001) sendto$inet6(r5, &(0x7f0000000140)="593bcf2fe3ece1d1d0c97ae7acc371ee9a73716463fe1a381c2382735eee2bf12636e757c7fbac2c5e901b066f1af7f240fbe16cdf3868873de28671a8fa18df7638884990811004da665272f991e80b1f0625277cec483b506caa69f8319aa46da1944ca98f586845bb545686ef7d87cfc1ec4480ea3a5b6534be70f0cf3f62e2449d4aeba6e2187a2d8efce19a96000f9d8497ef1c0a434858c265c747dd5d1fe866406cae2b49c30d16531726fcf8c66bd8c79163ccdd7af81791d85427bab58e535dee1fe2727dcdc00899213fc8f1ba3e2072fb8be7094c4b63fdad0439", 0xe0, 0x40, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @mcast1, 0x9}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r7, 0x0, 0x10001) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) pread64(r8, &(0x7f00000005c0)=""/4096, 0x1000, 0xffffffff) 20:49:13 executing program 4: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a751883306f53bbf221b9ac9f337d6465765f68656c7065725f6578"], 0x2d) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x4}, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) r3 = dup2(r0, r2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xffc1, 0x1}, {0x8, 0x2}, {0xfffb, 0x400}, {0x94e8, 0x6}]}) 20:49:13 executing program 5: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x4, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(0x0, 0x0, 0x40000) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f00000001c0), 0x8000fffffffe) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) io_setup(0xb0, 0x0) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') syz_open_procfs(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendfile(0xffffffffffffffff, r6, 0x0, 0x9b6) fcntl$dupfd(r4, 0x406, r6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='projid_map\x00\xba\xb6\x10\xe1\xc9\x18+D\x80\x95#\xc5\x9c\x04\x00\xfa\x88\x02e-\xd3\xb7\xe4\xfb\xd7E\xd1c@\xfd\x1d\x105\xed\xa65H\xee\xac\x85\x16L\xcf\xb8\xe6\x9e\xee\xd2\x8f\x8a\x9b,7\xd3\xca)\x13W\xe1\xa2Y\xb1]!S\x1ay\x15-R\xe6\x13.f\xf5\xd65\xf8\xed\xe1\xb4\x12I-\x05\xbe\xe0\xe2\x1b_\x80\x89E@\xea\x82`{M\xe9x\xd0\xda3W9h\xe9\x17\xf7\f\x82\\\xc2\xfb\xd8\xf9\x8a\xf2\xbfJe.\xa8\xb0w1 \xd9Z\xad\xd4\x85tHn&\xf3\x12\xf5\xf1\x9f\xa8\xces\n\x06\xe6\x8c\xce\xe7\xeb\xeb\xdd\xe7\'\xd6\x98o\xccF\x9f_pMbXF\xb7\xb5\xb3F%\x94\xe2\x83\x11\xdb\xe5\x15q\xe1\xe3\xe9}O\x96\x91t@\x94O\xa1\x90=I\x9c\xce\x7f\xa9Iz\x86l\x05$AW\xe6p9\x99^\\={\xc4\xab\x93\xef\x89*^8Ki\x03\xafn\xaa<\tn\x8a\xe3\xa7\xa1\xc7\xabeEg\xcf\x81\xd9\x89\xe9T/\x113*11\xabT\x05\xc6\xb0\xbf\xb7\xbe\xcddw\xd8\xcd\xffhXK\xbc7J\xbdw\x9f\x98}}e\xff\x87\x87\xd1\xfeP\xb5\x8cY+\rwR|\x15\x9a\x84t\xfc\xc0\x121\x89\x95\x18\x91.\xf8\xea\xe5\xaaE\xd9*H\x02l\xae\xfd\xd2\xe2\xf8\a\xda\xe0c\xa3,\xc0B\x8c\xea\x1cJ\x97\xf7\x9c\x06Y\xc2\xd0\x14mQN\xac\xe3\x9f\xe8\xbb\xad\xa5\x06\xc3.\xd8\xb0\t\xa7\xb6v\xd0\xf8r\xbf\xc1\xa0,kS\x13\x16G\xd4\x8f\xd3\xa9|\x97;Um\x80<\xd5\x89Au\xa1Ny\xb2\xff\x949k\x0fh\xc4\xd2w\xae.\xcb\xcf\xe5Kf\xc3\x93\xe4\xf5\x1262\x8d\x1f\x8e\xaay\x80N\xbd\xaf\xe6I\xa5^\xe6\xcdo\xf02\x82\xb4e\xed\xf6\xb6q}\f\xf7\xe4\x0e\xa2 a\xdco\xa3\xbe3\xe0\x83=^E\xd3\x90\xccd\xed(1\xb5\xca\xd6t\xaf\xca\x97\f\xd9\x91\xd2>\xfc\xca\x95\x17\xcd\x0e\x190\xcd\xebBV\xf1\x92\xe2\xe1\xf2\x7f`/\x16\x83\x9a\xe1\t\xe6\xbfb\x9a\x8b\xd9\xb7^H1m\xd0l\xd1\x1ec+i)\xd5\x8c\xe9\xae1\x7f\xaf\x05i,') sendfile(r8, r7, 0x0, 0x9b6) write(r8, &(0x7f0000000b00), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r1, r4, 0x0, 0xa5cc554) r9 = socket$packet(0x11, 0x0, 0x300) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180)='system_u:object_r:klogd_var_run_t:s0\x00', 0x25, 0x2) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140), 0x4) 20:49:14 executing program 3: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c5320b836f26e80fff0f48bb7a9dbe30fcc0ee3c0d19fc464240758595e7eb33de379d54b1bb38a0e4a0f889ec0c3fba40525614e260a798c62e2171b48742723f0000cde52e8a2eeadce33f9d6de553764b2dc37cd776ae9bc72c0b81fe59309fd1ad681f592a81fc06e67513252392cd38fb", 0x86) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0x11, r1, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r3, 0xa, 0x12) recvmmsg(r4, &(0x7f0000002bc0), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x10020) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r6, 0x0, 0x400000000088001) dup2(0xffffffffffffffff, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) recvfrom$inet6(r8, &(0x7f00000003c0)=""/219, 0xdb, 0x30061, &(0x7f0000000140)={0xa, 0x4e22, 0x3ff, @rand_addr="4e4c9be2cd13fe12d8f4ca30001a243b", 0x5}, 0x1c) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x16) ptrace$setopts(0x4206, r2, 0x1, 0x8) quotactl(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) 20:49:14 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) r6 = dup3(r5, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 20:49:14 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$FUSE_LK(r3, &(0x7f00000000c0)={0x28, 0x0, 0x4, {{0x0, 0x0, 0x1}}}, 0x28) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000040)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x397, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f00000001c0)={0x77359400}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) epoll_create(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r6, 0x0, 0x400000000088001) accept$inet(r6, &(0x7f0000000140), &(0x7f0000000300)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 20:49:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r0, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') io_setup(0x80000001, &(0x7f0000000000)=0x0) r4 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r6) r7 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r7, r8, 0x0, 0x400000000088001) io_submit(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340)="0bd203e0666a3a05080ac8da98164bd398f669ee4a55bda0c7f7e340b58892692b6b8c6836800ae73c3ef0b7c9536f65c4f9da9a522b6eedeafe1afbbc78f3244be5cf13973bdb26620768a1dc4aa8ebc2e3c43e7a997df95780d6d93e2fc758dec3017434b35ac819ff116866f35413b30bd21abc06033f817a4bf85f2469c03c2d65f3ee1afa590d699478dc6123166dcf20cb458d7f16a1aabc6e4209c2e3f32e2b82b940faf6c5ed764b49b072eb40295c8d401ecd934d8e62bbfe0c4b5f9bd9ae8378b04856be4e09e7a4a1743a3a8a45a8a8a01d221ced1df7e6618d39677aa766103529ea59e741b00f07c0404b845b1ea1888ce02726e5ebe189ca9c338c4a24c34feb551b592c7900789bdd8edeb2c76061dfb38901c1f13ba510b0ec186029ab773a0e4137670c00f0902c125ec614a281a184d6cf5caaf2871c53ab568832be1a0fea536645fc6cc47ad7e1cd666639219eb5647a052f7c77401da8b73125cf54f63f507e4a9d05680887f18a838dcefb3c79880a8a6765ee7b7f4e29a6f554699c845716b56fdb0589a5155ba3b71d3d1b1e9930d39489771246c5386be4cab89e672c224b5e1aa37fb7c958ccdc615465c945d4b6b24fa0f20ecec3a316c2d2b73e9c02b34192919ddc01ae7c02f5a20fe3c8cda701e7075b376c203b3335628524c3d2bacbb53aefad6201453479684c899fe0e45f98fee847c9982774a2d2f8df9b19479f9881bd470a83b63390219c0f8745a117d49ca3fa0ff513904d016c5c83feb43094e9e765ffb4ef4946a6fa7dddd9cbd5dd46489b8b1295a921bb2af6216abd7aebf79edd0f746d5689928de0b701a31d40749285aae4aeccd17426a7c02c559e46c84bd91312a57b7a8df4be3633bfff2697d233f27ef3b90ed9e278b878c254bad4533f7828c4f821c2578683711271e8ce29d58ae46f3bf2f9647d2501d1b0df3163d4298a77e67d47b1f6e703fc8a8de2fb5e7bcbcc0090bc1d7fc8573d1ca5a3b3a51aa0de601dc61139b9e7fb1265fc52d90967a16b1deffb1c4d5c4683620a1ec9068dec80c1b47827cf8040fcd5781de3dc8d83ff75735f1176162c2d100bea2971262567936f65466efed546ace3e05921b8062ee3d9785a5e912c46b848d7dd84549dbb306b23894aa0f59b9122234edfa71aff7f709154651e89dbdc9d87931fe7313632ae9c521d06569f04b694d2695a9830a575e8a83ae37ba396db5221645dac0e2eb027b0a9811e9144567837f1733b51f3b59b35f59e3fbff0b6c3e592b992953baf5db8471423b5dcd727ff95005b821330acaaecc96d7f3662a60ba3f04aa85c91aec8f82b314e281f4e0c8b5aaf473a7486027531a001f29569ede8fe589bfccc35a58953bea20b202201cec09632c9b94a684f6e57d617efa16735ad1ebfa8380e944d20f0cffb7550e4027272b6395f1ba5491ade5ba0552fe73ba869e554db3da4e62dc87bcd0219b8ed143de7394bae0248213f68d749c0e2079ebbfcd1f2bc40280692134e147f43febf88d21db590e75b046cabd581d0854f25dc9467cbf93134497e22d9c4e5512b465bd4092a8d376c64a6ee20c1fe9f55208d2852428470eedcfb4f3f39d5611677edf9109a0daaae5db1b37b2bbc78ece0bd82f7ed33780fc1731d0638514ff72763b45166a67e23048e0fad7bb437730356e515a01164ab90e6aef3c9e850f051bd1c1d83386ff54dca771673f9621f30d62ad42f32bd353431c698c5c85c6cdcb86674de45ed1e4ca878775e609b2a93b8b7f5213fceda61df3fa541c42c4ba4e811b80db533961fd1cf005f497a6e7a58effeea5603a846a46c3d9bb3aab208a9faa1715a06fc244a6e1f81a83359cb755aad4b8467e94333a5642a23ca4aa909d8ebcd0f0a9d6e8af51e6cdd86d1ea40498796dc5f679c014223f364ac12d2245108c6dd704860768f2dc3ee567750aeef446f70fb3541aa52d2011b1f575b4f7102ca9de3011a22b49716175ab5b4331d653323574ba4f843d59e7a9b2006e03cf288429897989c50ba8dcc7136295e9562edb8c3857aa392c5414d1e910c33fc5afe494b4727337c8a45ea4cad9c60ebcd4433e2f013df0ece8faaead55a81c9e07065285b75f4217d5caa5b15fe71f315d2978c02410184509f5df69b8515cbe8a1cb2c9748e115a14b4c681d964d45a267d5ad5fc76df9ef4f6bd4d51ec1926384eccb3548479701a7899ca90aa3a5c7d616e459bac6558f428377f3effe3f14f8b4d3d5401a4b94059159776968b210f9615c2a8e3e866a6f50dff843a079a9a33b267a45f8a19752daa0557cb8782c456bc39d10dc4492467cdb6bb438e83af271b91c75aa829c93e322bd13572064bf0bc6ea942e70c8165a151a3d8750d3f51a7f5bb84fcec5a524cac0fc9b4708ecb976e116ba75159fdef7b792fd67c0f02425282b69c454c3e0a23e1f35863fdf6f3727437673b65fa701c49a957186daefe13fa2c65a3a8a0896cb92dd79b713e974e9cf92fb5acfaba18279b3c359bb51bb919050af0004d6d1f9f26b2b6bf90677bc7ef6d5de8a9c3cb9dab36ac8dbd6cafb293f846ce8b18b05ab4896c296422200670fdf5cca04f578617018840cc4343002333eb4f0ddad0aaca7f36054c78e35b480c08c5931ddfe607a21bfc52df87bfb5d3fe5b3e9bf5951339e64ffa7e36c1fb2363c4bfd8da8ff7659e9874b67e7e77ffbc63a7ad5a7e00fe633be595bfd501a0eacc05d2ecbc7eb43ed74c9a83574894cdda69d2c005a860ee6af55821c5cfa72c12a52379de54da30ee55c01d758a5e83903f65648658141d731eb5a67d27e3cc56fe238fe8d903750dcc370514af80d8aceb95cb6f7b8faa4aa313a8538e59cf9b425289dabcfd001f9ac800c851f4c892640e1cbe00e16b0127ed636352216f14d2267dd2defc52ab4454d9ff0fb801ac9d649d81ac680affbbdc6deda380d1317d387e58675290627bf9d97f5888c3b072519f4ea5486ea1c99c776328783dd12e6783320778f952c815fd717ca220cd9c14e744ba51c8895728dc0e9f54d8f5188bedd1be4972351cbdc2cb3b7b3ddc6e7a7974ca53e30006ba522ae3c0f3e49b16ec4a51f23dee8922e9c189baf143e19d5973479fb3d4fd0f33773faf4bb2e869670a0d42fb222d6cfc814fd92c59bcaa8b4555e7ae97aa9f912b39d372eb5de610a804ebc3349eb08d011551bcfa892a04b56aef5f65ca3ad057fbbc124e5e3d49a3d488bf0bf2a8df3d506aa411e7ee62438f3d7bcbb708d96c7fb34ec681df773c948cf06d538a6029ff977d9d1ef618612b32ea599eb6d911564b2e0c2cb9be46e8b4c5a9eddfd69a43472971bad9e19c3002d3def9ca86d2af1e25be7a8a892a8adae413cd82a57c7e18787b3e3e06b9f4be3899ba43eddcdeca8aca8157b2927b66df85f5f6eb7ff6d613540dc8e6a26b1a62e6573cb433b93147ee1bc60080865294af5359ba755ecf0ff1bf7bc1a6b997f77a677c8e31cd82808461b1735115539c16b484cef94b2dfa7a5eddfe7a33f382f590542ee7a4a3adec32873a72bae480135e291e192af6372a98b85411a66827a8da5e859eb2002db2dd75d6736999c69bf05d8218ecc9867c112e42e214c2e3b454146eaee47c7d494551bcc72dc02bd19bd47e63caf3437e2be665df50a2000f2309f7981dcbee6bc0aeeef1749030b68093db78922ef809a1e81929c6930f68cd963364e402d26bd444b4ae8930126e970a92e8c777a089cc87488a1be5ec1bf120e607addd2d4aa1bc00d5a657598cfe9432ed94e077183f1ee96efa76669b5263e48ef0c817808c7c215e04fb7ceed030bc1ccc8cf1ba4fbb04a5d8f5046e4bcabce2fd8ca02e5942bdc92fb2eacf9054edfad3fe401ca959063da2edece34f80836e5e142313064cafbcb3b638afa3632f6a62e2801c56ac0bf4d69de486dda05401da1edad23174f2b603d456a0dbc4201f49a3540f4026e91e032d7ec3ab33c4c1c8288c6ed5882840351ff5112140a5ae7810d639f3c0a702aedc57d6613d0fb8373deea1643c9e7acb13e69ecfa00b1cf9cab67785c55449d0c3f60ae150fbd724b47d4646eb9bfda2859f0201acd383cf9824ba5a469833dc050bd9677067129c063e326943c3dd171c434f96615ae59f1b6a4c40ba1d2c0880a0f833c7b58938b2fc93c1ed55d223c020547b28fe37d61a49d26a7e185150d8ca76b957036b2af24b6c44c8e58f80cd08c1e0f1372afb6607de6c5ffca287585ca5037e31ccb56eb8c1745beb71948263d2ea2af07a44617820dbecef1ac7269c9fec57a6d8abaac0abd2672c92577b4d37d09825a2d0ea109a5e032bbc4e0b5ebe1d69f5ed91da37b5c0c3780e619f4423487a3d1fffb2a2db4cd3f26c43c805856550384a5225fd08c12e4351e73effa60f8f463aae7e588759c85e34e2e2ccc0fd553ecd1d177d83ed6c38cde3a76fe6587379d890bb209e7489ddb0c09649f326704bb8004ce16a1c170db5f407d6a7bdd5d42205ef846a28df13148f172b66499df978a18d872aeb2fab91bc4947319c1f4057b820cc9e8beb072c652338fdfaae9de24aa8861e171f1ca191633761714c3fdad2db8c07e38d5301656cd909f2c6f8e4f828a0a98a6d359309e0d54b49366bc6bd2c76f7e05dbae5f80b2dc636cea9e1425bf204ad0d3ae41644056cd0987463659d551066d71d05875bd988f29d7b133f711869dd1bcc4b7f38caef130b64d9ebe1e6d11ec6f12aec4e7283a3cbd88b3412d5b917fc80b6127c67a8e894ba9b2ce23253a4dd2319efdbb5cd5653812049895099fc5c7e5219398398851d6488607126cdbad67a4bfb627b0b1a1d3532011d2a06169cda02c0b5a76b43cc2ec3c8d686e53ab319bc825bde47d4bd8e0b6ff480f8a6c749ee2875b5eb1654aae33367f51ce04f798c65b244289287f6750c2577038a17e8b9b204354a9ace225d8a6f62d054af52e8a6ad4caed1d85edbe1111de55bb76a7a1db8bc6f6b4dbc98005264f153a7994e23aad91912febf9489a9c048d5363fdea6185f98ff34f6700b8c3e6c72c56e8bccd0bacec3e3f39f65b0f999e94c669dc2901dca7a39b87689375f74c9c9ce43a3cbddce6d44d81a38a4b35b2d0a4885bd50216caea4461cfcac43b1a6070757dcbf1c44009f6d5645fd8e04bad16f7a853d0396557bf6521a5a13bead2818cc6d77f7a1027b0b06529826e78122d4ebeb3f85b375472d34f4b3f866da19091dcad63b1ccb7c0670e9b5df48038e1500eb71f1ddc72ae83c79c87beab0f50c2cc0e536b3305511c80ab0fbe279291d6d33c5989cac0c6087203cc3eb8d57c8a94ffc076bbad67622aa7bd98ef7626556e07d44fa84a60a64bb657b36c47ecbf991392ef60d64c65e15878d50210f4955877adc6538534677b546484c33ec629501df064a478d17312881aa458b8f66fffef4422c0b03bed67ae1c8ed274c4dcc0aab9a0091731eb09f39d0e9e20f6cc83489172704c91b8546bf9c93b8e7e04080db16682b58958878eea0f0bed0fb1d9be21becec8502d2f39b0de4ebc7d6f6c66eb60623d09f35c322c3f0ca6973980538570abc6754e6f8496945be725dc13a6db3398f5dc25147ca7d10536acf2b9a228f23a1761733531c19842536a804eca14f4821485b31b5da6278473f571566448dcbc094ed8239218ea6b8f36508cfaed0b2b9e14e61a44a32da78575a995ee7674b27d99a4f0931511442111ef7a2ceb529b812a16a594c6e11fe0e5", 0x1000, 0x8, 0x0, 0x48dc1080343f3980, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8a, r6, &(0x7f0000000180)="b5205526ecdae6ef6b84d852", 0xc, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x5, r8, &(0x7f0000000200), 0x0, 0x9, 0x0, 0x1, r2}]) sendfile(r1, r2, 0x0, 0xedc0) [ 610.417919] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 610.916035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 610.924886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 610.995054] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.016872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.120222] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 611.218881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.249052] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:49:16 executing program 1: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x4701c78223e9d132, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f00000000c0)={0x7f, 0x3f, 0x75c, 0x1, 0x6, 0x6}) 20:49:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000300)}, 0x0) 20:49:16 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="24000000260007031dfffd946f610500070000006700000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000100)="2cdaa70ca7548a4785b6a0baf168f9405127170567b5abae06cdd59942f534208fdc8be347c389caac3978c1ce611e69a7cca6d86fd0a68dc6dcac7dccdcd5432805f153aebb272ac084845a1f5bdb73a6c88a5eb7b8ad25b86d475ee2bd7140f0fbce772f649de1172cae6544c9d2c3858f9ecc6078280814ebc7879f7cb1427b173448680dfe34c2b574be3993fbc16da6405d071e2ed7ce961bea03a6108306fef7f125bfea2f0d3a91b9081e347772678295328908208a2c34562eeddea1f00a9416a71a1d417c1528ed16c55444ffdab148a6e7b3c8826ed25721", 0xdd) 20:49:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0xd412}) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)}, {&(0x7f0000000100)=""/243, 0xf3}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)=""/167, 0xa7}], 0x5) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 20:49:16 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000ffffffff) creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/154, 0x9a}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$inet(r5, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) fallocate(r3, 0x0, 0x0, 0x5f5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) lseek(r3, 0x0, 0x3) 20:49:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x287) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000200)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) keyctl$clear(0x7, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40210}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="180100004c73a00423cf3e77967d0422d479fc9bb5b2b5cd2873994516725e540a19c0a430183807a899e219ba359f8c379ffb213c2267e708776a609c9b5a43c0cbb3", @ANYRES16=r6, @ANYBLOB="10002bbd7000fddbdf25120000002c00060008000100ffff0000080001000800000008000100070000000800200002000800020000000000080001001f4c00070008000200010000000c0003000000000000000000080001000100010008000200080000000c00040007000000000000000800010003000000080001005a060100080002000180000018000600080001000180000008000100fc5a0000040002001400020004000400040004000800010008000000260004000c00010073797a30000000000c00010073797a3100000000050007000800020002000000080001000c000000080001001d000000080001000100"/274], 0x118}}, 0x1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ftruncate(r3, 0x80003) sendfile(r0, r3, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 20:49:16 executing program 0: syz_open_dev$loop(&(0x7f00000004c0)='/de\r\xcd\x1a@\xb1\x02\x91\x11', 0x6e04, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r4, 0x0, 0x400000000088001) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000240)={{0x1, 0x0, @descriptor="b92c53c55fc73846"}}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @rand_addr=0x636}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x5e, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 'nr0\x00'}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x800, 0x30) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$TIOCGSERIAL(r7, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/4096}) writev(r1, &(0x7f0000000680), 0x0) [ 613.453739] audit_printk_skb: 27 callbacks suppressed [ 613.481759] audit: type=1400 audit(1575146957.269:1604): avc: denied { create } for pid=17510 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 613.531311] audit: type=1400 audit(1575146957.349:1605): avc: denied { create } for pid=17510 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:17 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00') sendfile(r0, r4, 0x0, 0x88201) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) getuid() sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@expire={0xf8, 0x18, 0x554d90911b127b21, 0x0, 0x0, {{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x4e22, 0x4, 0xa}, {@in6=@dev, 0x0, 0x6c}, @in6=@rand_addr="357780d1d1acc2efd4b0404868eabe7d", {0x0, 0x100000000000, 0x8001}, {0x0, 0x0, 0x5}, {0x101, 0x5, 0xa}, 0x70bd2a, 0xfffffffc}}}, 0xf8}, 0x8}, 0x0) [ 613.704548] audit: type=1400 audit(1575146957.519:1606): avc: denied { create } for pid=17510 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 614.191172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 20:49:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fstat(0xffffffffffffffff, 0x0) geteuid() socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000100)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002080)=""/4102, 0x13c2}], 0x1}, 0x100) open(0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000200)=@v1={0x2, "e65568edfc8af77b"}, 0x9, 0x2) write$binfmt_aout(r0, &(0x7f00000008c0)=ANY=[@ANYRES16, @ANYBLOB="aa98ba252c0cc81f10aa5971732d846584f7375fb84e621413f6b66c0af3aa4a7f0a4fffb72942b78b630bdca5f13687f25f26ea1fcb5b9f8acb6f146f823d9c2ff0b301d44839a14f1f2efa7d03f8742972fc78ecbb0a76f31dec7270c34136e9ea1e53f0c5d8b37e", @ANYRES16, @ANYPTR=&(0x7f0000000880)=ANY=[], @ANYRES64, @ANYRESHEX], 0xaef758f3) write$binfmt_aout(r0, &(0x7f00000030c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004615b339cd3a5f00000000"], 0x120) 20:49:18 executing program 0: r0 = memfd_create(&(0x7f0000000040)='+\xf3em1\x00', 0x0) write$eventfd(r0, &(0x7f00000001c0)=0x2, 0x8) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x11, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) 20:49:18 executing program 2: r0 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="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", 0x1f9}], 0x1}, 0x0) socket$inet6(0xa, 0x800, 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x300, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@remote, @remote}, &(0x7f0000000080)=0xc) 20:49:18 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/keychord\x00', 0x40c000, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x36) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}], 0x1}, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000140)='./file0\x00') getsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f2, &(0x7f0000000380)) write(r4, &(0x7f00000001c0), 0xfffffef3) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r6, 0x0, 0x400000000088001) fsetxattr$security_evm(r6, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799dd222a748844f02020000000000000046373f2aaf296fc06065478d7a084c6ff8da30d01b9cb4c70aa8ab86379e5e50739aa773ae810086d7839a5956537934dc76491921d0a48c416dcd996ca1406ad49d7f3d3066e90c4c8c418f445e000000000000c7544282506bf07c678075fd0d0ad098b28efc0076619e3d2960a867ee2e99ece8879031838b8b1c0b82328c9db18017aa31cf7cf538a1d25445ee39694e2f49176e291ecf423f44254dec9ce4e3b8915b65b03458c35d63330d83b6654d5f828388bc2cb4a82d8eeee27e549e170688750dc4b2ec7e87b45d39e940a51223cd8b529d0b22245068f62915739239d9b43ceaebf80e8bf137e854e065302c8e6906a3fc5addd3c685c2f27d3c3dae052065dcd6e5ac34cc17c1ffed7ae7e28ab2163ad6be27c78b7c1716a005ec80b5c6804ef9d54c0775b65001d5bea0bec9d8cf3c4a3a9e87ec5a2f"], 0x1, 0x2) read(r3, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, 0x0, 0x0) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x4a) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000080)=0x7042) sync_file_range(0xffffffffffffffff, 0x4000000005, 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='\xe7\x00', 0x419001, 0x0) socket(0x0, 0x2, 0x0) 20:49:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x208200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8e18) r7 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r7, r8, 0x0, 0x400000000088001) setns(r8, 0x10000000) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) r9 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) write$P9_RXATTRCREATE(r9, &(0x7f0000001440)={0x33}, 0x3) 20:49:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x20}) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) r4 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) setreuid(r4, r5) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000380)={0xf, 0xff, 0x9}) fsync(r2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000080)={0x7cd636f59b83077, 'team_slave_0\x00', 0x4}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') socket$netlink(0x10, 0x3, 0xa) 20:49:18 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x200003, 0x20) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x3) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000100)) write(r3, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) read(r2, &(0x7f0000000000)=""/250, 0xedf1d44) [ 615.418595] audit: type=1400 audit(1575146959.239:1607): avc: denied { create } for pid=17540 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:49:19 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x22) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20a008, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x0) [ 615.560454] audit: type=1400 audit(1575146959.379:1608): avc: denied { create } for pid=17540 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:49:19 executing program 5: syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x29) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@mss, @mss, @sack_perm, @window, @window, @window={0x3, 0x0, 0xb38c}, @window, @timestamp], 0x8) r1 = getpgid(r0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200), 0x4) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ptrace$cont(0x36, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000240)="f396785127c8c5ef703d057673e7cc61", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_netfilter(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0xb, 0x1, 0x800, 0x70bd27, 0x25dfdbff, {0x3}, [@generic="a1318f1bb155e5a1e5185e3643c8b92ea26b844a78a6fc92504c94885a7328df5b1ca22ffb20e6cc369e4ba4299197af90131343397c54a50ee6f232e4ae7a496900d4da496063ad6d1f0fb05c680b745a0e17c9ed7d7c49483a68df09b3355f55672e9c11f0a96231564115825c0d55658011ac9a445c11bf8c3cd50db9b962d3b0c8298efd51d4dd055a9ca2be6de19464f1e88aa7bf536f8fc56adde2fa7c038a4746931b7cdfe7e4a63c5012b611731992b07aec0eb443792d9a064e4666012df03ac6"]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 20:49:19 executing program 1: fchdir(0xffffffffffffffff) pipe(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) prctl$PR_SET_PDEATHSIG(0x1, 0x13) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2000, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000004c0)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000500)) mknodat(r1, &(0x7f0000000440)='./bus\x00', 0xa100, 0x401) geteuid() connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$KDDISABIO(r2, 0x4b37) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@ipv4={[], [], @initdev}}}, {{@in=@local}, 0x0, @in=@local}}, 0x0) getgroups(0x4, &(0x7f0000000680)=[0x0, 0xee00, 0xee01, 0xffffffffffffffff]) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}, 0x80000000}, 0xffffffffffffff70) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000), 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f0000000300)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0), 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000a) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) 20:49:19 executing program 3: r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x100) fcntl$getownex(r2, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, "0000000000000101", "e5741ddf62e6c15a3cc38c6c68208e63", "b6fc8d9a", "0300"}, 0x28) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571") write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46f54ed19577eae500708a00000bb386c184f3bcb2b89d31fdcf4468de44fec5348bba87f85c47a00bb66503e502b8d19c602109dc41008a0e3e3a7365951c3e9eddcc5c50400000000000000415f0000"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 20:49:20 executing program 5: sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r4, 0xa, 0x12) recvmmsg(r5, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x16) sched_rr_get_interval(r3, &(0x7f0000000000)) sendmmsg(r2, &(0x7f0000006d00), 0xc6, 0x0) 20:49:20 executing program 2: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x1100021, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r5, 0xa, 0x12) recvmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x16) r7 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r7, r8, 0x0, 0x400000000088001) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r10) getgroups(0x3, &(0x7f00000002c0)=[0xee00, r10, 0xee01]) r12 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r13 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r12, r13, 0x0, 0x400000000088001) r14 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r16, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000c80)=0xe8) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r18) r19 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r20, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r20, 0xa, 0x12) recvmmsg(r21, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r20, r21) fcntl$setown(r21, 0x8, r19) tkill(r19, 0x16) r22 = geteuid() stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r23) sendmsg$unix(r3, &(0x7f0000000d40)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000340)="9bfdcc1549153d8b78b45c4f61a1ab50ab961a7c594509af30f1cd906835ddbe4d01af3fe3478c6198eea8b1556e463ca5703d29a70df7b1335ec7a4da52053d25cfe0dd7bb68d1e1783fe0e7953e149dcd50d3aea6428a4dee832891f009be62264a68d4bbde36886f973d9730d470f3ac56f45fcc2c027debd4d0b491362086d443c16c803be294aaade7dbd2f12a66246b9d773645e309c4cdbb87bab373740eda4e7f150d1b16120cc8517ac405ca556917caa2307d1ea5043057335dfab3796968d40cfb58a5bf55108a8da88334c595b", 0xd3}, {&(0x7f0000000440)="a9cf03e2cf88e604891ff1cf3bd0a74ba9a4a91e1f8d29bb8e3a84b13648f90565ac7140781e71f8769256ba02b1b0aa68ab0094e81933469f5440889da7a2cba49eb6ec7d32b81df5b557a3846d35dff57b1225819e69d192818ab5ef54d2a3e7a55df440e0585a93477d545bfb49414cd9c46a820a32e1dd7753fa387b2f75a97d65", 0x83}, {&(0x7f0000000500)="a66391cfe0330c463350278319a9b6663d9bba3205ccc77dfb6b14e197d8111eb00ae095f4ae227e7590b4adc591e0977ade2fbd0623729fe97748c82670ecdb61d9cc0324cd4b4c852d045b", 0x4c}, {&(0x7f0000000580)="7d133866bc013ee50fc32250756f41ccb65b94f66393ecd48c1603e2d5a13196f725df773f4ba36640daba5da8ee560cdf997c0b6f3d903b80a63a9e9e837e442ea82a7ebd44c1bbc7418ece7213676985ebf5550f2c155a810b89ee265d5b7c147ae9b024d1d54032d16fb51c55f042e85145b60f8e326fe5", 0x79}, {&(0x7f0000000600)="04004c648ef93c0bac81dca63e0344f2520ee14a3e4e3b2d7f4948af2d9774d4aa779617b53dfe80b0290a2e82df1ce92921dc30ad860fb579741f0f82916c012231c2e3b3ed52b43c65fbb0658b3dff5874e7391e9c1b5a0734b40babc487ccadcf408a668cf746850632d8c98b6c41e70c8d35bbea7f1c558ce700ed567695604c257f662f4223a9d8310836b1add2e344c9f4997eaf1e8821a8cb31cca78a", 0xa0}, {&(0x7f00000006c0)="1b40c3a3a330290231d04fd62bc193ee3de00a87e8e48388b92f4399e3a852cdd4c90eab236db5f667afe4056b3aea5e36bfdae062bfaae8a8ac1712402f92e0ed81322c52fb66bd9105a5125bd877a060f0495a95e7ba6862800186f91012a6f9eac2da780369ea8b31684f1ba4e7d0d44b92835cfc7cbcac4e89ace89b712e6f73fadc75b1307f90a833fd2045ebefb489aeb391d66b2cbcdf2c47c7e9bd09f664f42564f60212c7b14d360bb70faff59bd1e3070ce0ea68e64580b9127df686a3ef2e9ce4bc2409de4fac2d2aa11020e3c1203ec4d9612e210ad74606518e98679d", 0xe3}, {&(0x7f00000007c0)="4fc4632f6300f4fbf49e7125c9c01203dde4773c86d831eb8cfa30323438e22454e926c69ce18822af8002cc4aa33997de4c80a7610384f1527386b7be3a45ef08f528a3a68b610a183fa935a3dbaf483b0143ecdde96001a464db4af8409c64fe90f76ccf6888b0715f9649152890e6", 0x70}, {&(0x7f0000000980)="a70888e7fc0a0e9885d0c199e18b21a83d3a5f2ee8671e869367ce49b693a46a316c07ee9e232bff7c761140a0be3784eedc581efc03dbb45b694feca2c78b019c3221237da068032f73", 0x4a}], 0x8, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r4, r9, r11}}}, @rights={{0x1c, 0x1, 0x1, [r0, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r14, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r22, r23}}}], 0x80, 0x10}, 0x20000062) r24 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x400200) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x110000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="6d8b2b3a3d50ac7adeb7ca168d70a8f31113e2334cadf9ca116a8f7b52012b7ecfdfc80c91b87fdd81197cbc6c5de49fe687bea21c8945ba68872a085d04fc9a9f3dba37"], &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) mkdir(&(0x7f0000000840)='./file0/../file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000880)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) fstat(r1, &(0x7f0000000b00)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r3, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x1, 0x4, 0xa}, 0x100010014, r9, r10, 0x442, 0x210000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x3ff, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x17}}, 0xa0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r7, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r4, r5, 0x0, 0x180003) 20:49:20 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net\x00', 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40202411}, 0xc, &(0x7f0000000700)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c010000150000042abd6000fedbdf25ff020000000000000000000000000001ac1414bb000000004e2100004e0408000000000000ef3cbcf592a05203198feaa7c203000000f7900f99104d6c6fe7fd4571636aec5fab19f865c6ed57dc95b265b3a50b4794f30b865ec318da7e94ff2f6036ae14363503d48f2e778b1981ea236b29436e6e416500c8b8b8c1e10ad0ec11549bd208cbb96d91ee111705", @ANYRES32=r7, @ANYPTR64, @ANYBLOB="b46b6e00ffffff0500001c00", @ANYRESHEX, @ANYBLOB="030000000c0010000100000000000000080003000f170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYPTR64], 0x9}, 0x1, 0x0, 0x0, 0x40040081}, 0x8) [ 617.814994] audit: type=1400 audit(1575146961.629:1609): avc: denied { create } for pid=17615 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 618.079560] audit: type=1400 audit(1575146961.899:1610): avc: denied { create } for pid=17615 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 618.085132] input: syz1 as /devices/virtual/input/input35 [ 618.571919] audit: type=1400 audit(1575146962.389:1611): avc: denied { create } for pid=17615 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 618.661488] audit: type=1400 audit(1575146962.479:1612): avc: denied { create } for pid=17615 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:25 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) open(0x0, 0x475100, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000740)="072c1fb5ee415fd908429e9757bd25e49444e22afe2cc6d10dbb75b00146d915d5eeec29af419f866c789a1dd1107840f5226011a4c236d1a0f3d4411208e97891e83f460c33ce14d985b9fd5a6e5986e9faee22e96df6e90d055124695366ac1786e9b824610efad69a618b9bf2e236a81356b7d379d8f3ff0aafa43cdf5cab97226891d154a3b68dc7dd", 0x8b}], 0x1) r6 = memfd_create(&(0x7f00000003c0)='u', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000001fde), 0x4) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/641]) memfd_create(&(0x7f0000000040)='u', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendfile(r2, r9, 0x0, 0xa5cc557) 20:49:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r2 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) lseek(r2, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0x12f}]) dup(r3) creat(&(0x7f0000000100)='./file0/../file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x2) sendfile(r2, r2, &(0x7f00000001c0), 0x7f8) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x0) 20:49:25 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)) socket$packet(0x11, 0x2, 0x300) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f00000005c0)) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_create1(0x0) socket$inet(0x2, 0x2, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="14ed0f33"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) tkill(r0, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:49:25 executing program 1: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x2, 0xa, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='set{.\xb4\x80\xf1\f\x97\xa5F\x1d\xd8roups\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r4, 0xa, 0x12) recvmmsg(r5, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x16) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r7, 0xa, 0x12) recvmmsg(r8, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x16) r9 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r10, 0xa, 0x12) recvmmsg(r11, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r10, r11) fcntl$setown(r11, 0x8, r9) tkill(r9, 0x16) syz_open_procfs(r9, &(0x7f0000000140)='mountstats\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r13, 0x29, 0xca, &(0x7f0000000040)={0x1000, 0x0, 0x80, 0xffff, 0x9}, 0xc) syz_open_procfs(0x0, &(0x7f0000000400)='acreate\x00>\x95\xf4AJ\xe8\xef\xcb\xebc\"\xa3&K\r\xf8\x10\x81Y\xbe-\x92\x931\xcb{\xf9\x9f\xa3Ro9r\x99s\x95N\xe6\xa6\xcf1\x8a\x8cT\x97:3\x8c(a\xb5\x8f\xed\x13T@\x17\x1b6\xda\xa8\xa2\x9c \xc8\x1cvE\xb1T\xd2\x9a]\x9c\x9d\x13\a\xa2\x9a\xb0K\xd2d\x1eg\x8e\xc6\xc0\x94\x0e\xb0l\x95*\x82\xbf\xffS\xcf\xfd\x0f8\x92r\xcb\\\x06kG\\\xd1\xab\xd8\xeb\x8f\x92\x93\xac\xb1\x98\xc7\xd5:K.\xd50c\xbf\x04\x00M\xc2\x8f\x15%#SW5\x8b\xd3vF\xd8_\xf5\x02\r\xd4\xedLc\x89\x97\x1a\xa9\x05\xb1<\xf8\x95wUd\xd9\x1a\x00\xcd\x92\xa1\xac\x15tTZl.\xcc\xb8!l\v\xb6\xe5;\xd1\x9a\xd6\xed\x1e\xa4$\x86\x9e\xfe\xa2\xae\xb1\xa8\xb9\xa06V\xfb\x86\xe64.5\xa4\xce\x1a|?\xa4\xc7\bh\x8e\xb5B\x7f\xda\xbef\v!\xb9\xc3Az\x8a\xb1\x12\x85/\xbc\xa2\'\xb0\xf4\xf3w\xcc\xfbc\x15\x03\xe6\xd3\x04\x9dt\xe9qBhuH\x06\xdd\'E\xc5h\xab\xbe\xde\x80z\x9b{Nu*d\xbemS\'\x1b\xb4\x1c\r\x1dtf\xb9\x85\xc9\xf9\x19\xf4\xe5\x0f\xeb\xeb`\x86@N\xfbW\xcdI(\x16\x95`1\xe7\xef\x7f\xd9\xf3\xc4\xc1\xc8\xf0|\x8c') 20:49:25 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000704ab095806090007000aab08000600000002ffff93210001", 0xfffffffffffffc9f) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x7, 0x4}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x59c62e1b) 20:49:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000013c0)) [ 621.681151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 20:49:26 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xdd) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RSTATu(r2, &(0x7f0000000040)=ANY=[], 0x445144e9) sync_file_range(r2, 0x7fff, 0x0, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000140)=""/232) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x3, [{0x0, 0x1, 0x0, 0x0, 0x0, 0x5c04}, {}, {}]}) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.syz\x00', &(0x7f0000000480)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x1d8, 0x2) 20:49:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) flock(r1, 0x1) unlink(&(0x7f0000000400)='./bus\x00') [ 622.375005] audit: type=1400 audit(1575146966.189:1613): avc: denied { create } for pid=17661 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_PIE_OFF(r6, 0x7006) ftruncate(r1, 0x48280) mmap$perf(&(0x7f000020d000/0x2000)=nil, 0x2000, 0x7, 0x810, r2, 0x1) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r7, &(0x7f0000000080)={0x14}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @empty, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r10) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r11, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r10, 0x0, 0x12f}]) io_submit(r11, 0x200000000000009c, &(0x7f0000000540)) 20:49:26 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x7) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000080)=0x8) creat(&(0x7f00000002c0)='./bus\x00', 0xb0) clock_getres(0x6, &(0x7f00000000c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0xaed01fdb0cc30421, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x0, &(0x7f0000000040)={0x1b9}, 0x0, 0x0) [ 622.936115] audit: type=1400 audit(1575146966.749:1614): avc: denied { create } for pid=17661 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) r2 = socket$key(0xf, 0x3, 0x2) splice(r1, &(0x7f0000000080)=0x3, r2, &(0x7f0000000200)=0xe4, 0x7a3ff173, 0x6) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffd49, 0x20008004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r7) io_setup(0x6, &(0x7f0000000140)=0x0) r9 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r9, r10, 0x0, 0x400000000088001) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000001c0)) io_submit(r8, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r7, 0x0, 0x12f}]) io_getevents(r8, 0x52, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)={0x77359400}) 20:49:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000440)={0x20, 0x0, 0x62e, 0x80000001, 0xbc3}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001840)="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", 0x16e}, {&(0x7f0000000900)="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", 0xe43}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001c80)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000001d80)={@empty, @dev, 0x0}, &(0x7f0000001dc0)=0xc) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000001e00)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r7}, 0x14) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) ioctl$EVIOCGKEY(r9, 0x80404518, &(0x7f0000001bc0)=""/186) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r10, 0x0, 0x400000000088001) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f0000001b40)={'filter\x00', 0x0, 0x3, 0xb4, [], 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000001a80)=""/180}, &(0x7f0000000180)=0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000840)=""/92, 0x5c}, {&(0x7f0000001780)=""/138, 0x1a}], 0x9, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/mls\x00', 0x0, 0x0) 20:49:27 executing program 2: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r4, 0x0, 0x400000000088001) r5 = dup(r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r6, 0x0, 0xfffffe37}]) 20:49:27 executing program 5: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x80) setsockopt$inet6_tcp_buf(r1, 0x6, 0x17, &(0x7f0000000140)="86c8886418770383f26e67a5991733296508d32d994a1e812d6193d8ad8dbe36b26fdd367c30b5ff8088e81bb5f3a401fb78ae7ec73eef736fdd8898869bec918dd5bc31310e9afeb5e2cedea146acf086b2b82b48c1bb2b10c0991a5833bbbcfb2fe0d39dc84c484284f3aa8b6965", 0x6f) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="a504", 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 20:49:28 executing program 3: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) getpid() sched_setscheduler(0x0, 0x5, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) syz_genetlink_get_family_id$tipc2(0x0) bind$netlink(r2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc, 0xc) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r4, 0x0, 0x400000000088001) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r6, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) write$P9_RSTAT(r6, &(0x7f0000000080)=ANY=[], 0xfcde) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r0, 0x8, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200, 0x0) vmsplice(r8, &(0x7f0000000580)=[{&(0x7f0000000480)="f032035691f1d51c042771f1932e1b27bcfea98f7af64ec4a8ae8d4a21c420687a421b0f27e171c2f31d43abf8361d5ba44752344d9f0c553763410cabdb42cbd68db60085487586abc9b0c5ed0764cfc97419aefdcb14ed3b42959560b06bfba5e83313cbeaf5ada9acb3aa6b56504aef0710aad8ee740704fab86a348bcb3c760945626daf4fb6573d31f46ce78d033531c992aa973b1d125947ecc4a9bffa962627fc31af5354e4c4d486b7c791f980da44417c5a186630fdf006013f3d2ef9"}, {&(0x7f00000006c0)="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"}, {&(0x7f00000007c0)="71c4bc62f4e03543be8c6af460a44ee9e1b9e842872a024d93711e6d9ef773373d3b576228e313bd093c8ef9b6229382ef158bd212f50494c58518323562bfdd27b018635acf62ee8529ac79e74f"}, {&(0x7f00000001c0)="082f499b7837de5b6f10fb199019ef702e2faedbed1b02c4401f5e20ca9d84b95a66f426f5935ef91fddfff304c0d9d8983808489b98081b84892abb"}], 0x7, 0x1) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000200)="55a42193e55e3e9681c383a8382c040b52a83c32c9c20d2d4742a5f9b0e3996fc1b737d2dd6aadb70ebb01c5c2206ac75668b7432ab45e5fa952277f131940036a06121e2334d6af903c683b3238e6a082b1effe359bca3b61a1a45ef9c301aa048aa5a94032e9241d83d2848a48aee8911c9614d2a42b32e3f07e3cf15ee8156e80ac1d19d6113a1bddaa925041930126e8eb8b87ef46abd4d28e4026eac91e64bee9db10ef07ada9e9e6e60f", 0xad}, {0x0}, {&(0x7f00000003c0)="2176796615182bbd122837133387f820055c74325e81efb193bad12f5fd0e634aae7126ac20dee56987c30b7e135d3399f18fc7ab2c7ff6f70e7db21ac0ab7ea1e3fb939996a48a8a1ca6420d5636e77a0d755aac80c65bbc2c80f2a8842e551855d0b22ad187df15bba46f1f3c5a58d40e869f85099cdc88d33179ec7898d9fcd", 0x81}, {&(0x7f00000005c0)="1d8a84496903c77cb1a9236a0f036aa92789f2ef7543325b610bc66693ad68fcf46761f90d77f8fd216e75f15f70830bb124f507d0177d23a88a5d69a3a09fa320b09233d31ce5988ed7ef9fb35d2aa401898e5750cd7e954470d9ee90bfcabaa277f60793b8fd5c446442f4ca1bb248", 0x70}, {0x0}], 0x6, 0x1) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000340)=[{&(0x7f0000000640)="edf120c0aa9532af262ef93de7a8561b2a865f592c7ffb4a53f0cb19fa3d0907d2092ed38f267b27bf66819b59ce85358b6f", 0x32}, {&(0x7f0000000140)="285c7cdf4a527f25cdb53c225c21dc9d753aab86e851a968b61352629ba6469fadc55a51b2f26293d327bc63060558bddb4e0fc7f72c3e1f00499aa33ad789f97788971829dbf7e1f5", 0x49}, {0x0}, {0x0}, {0x0}, {&(0x7f00000005c0)="1d8a84", 0x3}], 0x6, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, 0x0) 20:49:28 executing program 5: faccessat(0xffffffffffffffff, 0x0, 0x0, 0x2fd) futimesat(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0xbd005dcf, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) lsetxattr$security_selinux(0x0, &(0x7f0000001180)='security.selinux\x00', &(0x7f0000001200)='system_u:object_r:public_content_rw_t:s0\x00', 0x29, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) dup2(r0, r1) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) r2 = eventfd(0x0) readv(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001480)={'syz', 0x1}, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) writev(0xffffffffffffffff, 0x0, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) write(r4, &(0x7f0000000300)="6a46dbf3e533a5ece414d0c4716c1c8a0a0816d5d2a939ef5000004f0f92a005e5c384a8ef1d7db245dfe50c44f06e6c08c1161aa7125877bf190d7770b9323e8929e0b2285ba6c0478bea80183feccd3a8c6b15a74dae6c285b9e650e0b00"/110, 0xffffff0a) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x80000000002c00) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='\x1f\xbf\x12}Ouid\x00\xc7n\x062&\xc3=[PI\\\xac\xedg\xad\xb1\x98\xfajhkW\xd5\xe1ZM\x9b\xfb\xc4\xfc\xc3\x9d\xf3I\xfab9\x7f\x1f\xf6(\x97\x96\xc6\xac\xf3I\x13l;C,\\\xc8\xbb\xb2\x99\"\x18\xd28\xcb\x99\x81\xabS5\xb0(\xc5\xc1\x8f\xc3\xac2.\x8e\xfc\t\xf2\xd4M\xeb\x9b\xe2\x14\x1f|\xacV%\xdb+\x92B\x19&I\x00\x00\xafN\x1a\x80') 20:49:28 executing program 2: io_setup(0x3, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000d83f60)=[{}, {}], 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8000) r1 = memfd_create(&(0x7f0000000140)='wlan1\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) eventfd2(0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000340)=""/7) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f00000006c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x100) ftruncate(r6, 0x2081fc) write$UHID_INPUT(r4, &(0x7f00000003c0)={0x8, "de0ea97637db1ab9431de6c576f8efa96584257bb414a51e5347ab86d4cd5a21b0598b94bbae6a35ec858520eb7abf6c960d4aac6fd08d0a1a9b1a4b7b2321403e7bef64bd50777d2f2b4188d1b4f89e8ef49c8e56768fd6dd8bc44af8881a8adcf056ca373d8c5b2102e3809cb1469f9beea401527673a2d7348f9cbd7d754489669ddfa2964101939ebb90f5355c64f4202aa5aa6a8500a8be207a4c62d22d5044ce9377b805493b8847451e123680c85a5a8bb11089760f707500c20a7d32df0ed1e3a407781ae16f3f45145e421c3c6c1e94e419f13e97e46dd5b8d2744eeb028d4e8ce9ebb83bd507c1015b707dd94625a093ab0aac459a944f3d87be5e2fcb1522675fac9022ebed043a69fffef4620ea7559c82b0f5a0168fb3973445c92b08c8001d61ff250e6702421b6db898d7432d175a915277529a713aeb12207cb71522eda2659f8347e8fe51672fa8f106eb369c989fef095f9bf12ecf2240fe5c49e376b5209fb6eab19a009f885b3a16915a8d00300b243064e894f82d9e3c1187383997501a182d049a9769b9521f29a016c64fadcf79d78fdeccac238a409d5d3ad9d24d7514c1be4e7a84b817619d9482c1acde8e4e3e2b0225e1764072b42f65dcc6ca3282aee16a1e56f934d185cae48bd7de1462b69206d5b920d7d7e5eee91d0b8be99427096f1a55905081c8c8a40fce9d95b5b6bc65596d41d8a8d7601681bbde9e9aee1be42bba0dbab934047dbb32c61884a9def2b3bff2c5ec3b15fe8ab292ec5a592bd4a521b53b24007723ae6f3f986a7dd24d3caa8d774146da927d38abe0f530e944aed22e822df7a93c92a35e4b11677aa34af7ed0db79b7c2312b651e20df02412e91d7887c524d7fdf81bd473e7627186685bc139b4c5aa4c08f8361c91aa504f635465c3ab87bef608c7a26bb5327880bdb8aaf8ce0e8d5e673ecddcfbbb606092c54ab27edd2cb3b069a92b00d90cb7d7940e9507b868cbbf4d08ff9031bec7b46c80122f17b682dc5069a266114b9fe7949b829b6e646c7accd871b31d47873b321d15f7028a9954a30b34a8b4a255d2ec83e194505c3f5d1517d91efdfcda778fed0a33026311270a31ee0e10efddeea9ececc98b17a985334ca788c3eef350f5db2f320acffa177bf12ad0c72fe3a61a70a13db24e030c99277b6e713ed3a8ad2767bd67e76d3d88e4f07a897f27cb6d305e4e431a109b3f338036fe6bb50d4af6e270c642d2bf94664783237fd8a91d6342b2cdedd81b591bf9824e64b3a1d6145910f8f3c2a69a4bad6f2c1b8b3a7574e17bc1a9ac996e6725b39e30c9e7ed619bfeba4429f6062dd73b96ad8e30b405490ec7c1a269d1085f15b2740c565ff048ab9812f6ccef592d2ff51953bfe20abd24b64fef192d6a81cf6aace208a1e7baac3c852abb279c514942fb14335ebc5eb2553c646ba11820f567021cda8b04e57f29d21eec3ba36517490022bbeed060bf626740d8f13cb39cf07a0e34e7debd71936fa2806348ae5e1ac9c4ac71ccb31421f4ed05a3658552d9374939366af16a05575ed1aa2fdc322ad69840ea85cf3e1e7d68281b267edf966daae1d827ea9252c1d5436157b72a15f11f74ff10e21d85c4cd855280c1a0aef724f95e58874229f09b475bf28577549ca15d2e4e559fea8a70fa527a40dd5871c95d69f7a2d924fd3b4ff7b9798d2d427bc1d5fa19367bdd57e048e83ac760a896aca83ccb6ee6c5b9bd3d45f0c28638dd681799a40e56e51bee020bebd780447ca724a6b644e2ad58b7bb9820b448ea699bb299b5c9399bec698904970da9a38ed97e113a3cde09edcd14cc19f9011ed9b0e8200b9de7f5916bf43b3397d610b48e3c00ff7775e444904293a2c5e88f62a2d06a792cd6ffea6f58d5fbcca5a105f6ca86c4b69eba489010d70e3af42f0936bc17fe42c645b473e9834eda2e054e272ef4b9d1a230a4725a0a358fcf745c53cec5f076aafb46099009df7a18094214502e42ecec7fdc49767c5089d0929d3e69009639912dfc346fd761f6b628454e85960cbd8758c7f9de43f5c95d803c368ec846e5f335997b8278ef77f9e24fc5b7b76adf794e9deb478f6b5d463851b410eaee985bbee113d837c83f2739dab37c70aa9c01188cb539b07b17f20b7ff21b062177ed8f46c61fe14bbfe412d256fc4e98700e6391f29760402dba38d343dfc71f02fd8172bfd674e1cb6e0e7439a131cca4afddc281c5216a28b129d09699fa24b6c664fe71fac3630d71ca9804898a16b6b201bb120baa1f3ec8b9d564b2293919f30226e9a830cd753c1009953ba2972814e531f0164e9b97da51c13cf78eb41b39e20996ae0ea72609dea944318c3784e64d7baa523f67fa44dcb5b3e0034363e1da847faffccf2ac019cbd4a95b6a9b91effea6644b098ccd4f692fd455d42a3aef80e3205d238b370861155e795a98a6c979fad23aa3046918564fd69ad4f0a346d3ef6b08301a556b32b00d972c1888f7063c055eaf1ddbc8970901d21095277212de30798ed388bc69e9eabddf467529de3e7f986f78015fd3a7511684144e6543dadbd127a0d550e57b7faa3605c8b63eaf05c63667044b778cd3453f228acbcbc58db0f9eb6d2ed1f43d4f3e07641e1cba091b78acf7db664b9e3f5450519e6a4416a3b7c8e156935375ed651822e1d03ab5c12ace9316c1f2b5473f7e1ea650252b4ae671a88edffe3df70629007d724b2a51d48fb56c8079aeabb80d84d0bcd3804d0b0d9b4ad3803aa5bae11d296a9557be36c459ca5088eba79d30e14563e72ab22638911b7697248d26775adf62dbed56ecf300945b2fda4fef0594edd20904b2b5bb0dab2ca77e1886c16f7f904a6cbc9100acf2aa9bb0a3d1be46852c75146754664521161c9f0d8f97edee6cf1222543eb54c5f2f8b130a3d27c0ea461b76f10685b51258b5fbcf5fe63eb508a69472f6ed92705f5666e4291c4aac917e7cd055ea1defef3fc7de2413b1680057508c8ebf6ed20ecfb5ec72c96abe43b9c55da5cbec932639937af62b4e39102a557d07101b499721b95f0629994a0a6af978d98dd0850622381ebef5be02716479673979b792578f862aecc8effef6d0f8d5e455a4d710a04c5626b0f3fe2c87e9f8bd3c771ae85a973beade4431213c6243373d4635f8b2a82d0b21612357a36c54a008953586e26d8a96059637610e9957cf6d1a9d88dbc12d3d5520f9724486bacfa98c35e0dabc17b679cf4ff3f473ce7521a78c653f71a3f62ae442c90c11ef321b5ae51eb717438ca876ed28c4f46b17bf3b5db51710cc94a9cf509779c5a737981b2a1fc2533ac994436dabc939a6184da0bd7128d9386cb89cbe7cf7696ebe12639e700c60d1209b34df5b07f04dc51a760d60baadaa53c5675ea64d30bcedcbc927183791e4bfdc7f8bd6dd4ccf7a6c2e72f191c519bb919d844a56ce6ff92e3549423a862a476ba27a6b4c64081e0c66c6d63c7366912ebaab9f889873a5621c0990f495816b40a7984f96b35686c2a5ac524730f8be18eb47ec8d5f0f3c78a965515d26a01ee58673761c41d36f38f695195662c02a9deccafa061bd25326352228739742057a60fe31772537948446b4499b365a39991068a57fd7d00411d6a01b2fb944b20a8112c5642e857853d2b46767898eb93aae949c0e23c39b10f4fe5b6a061115d376efe0d2951168124ad591f14acf51c18d4814779249a0e7785a788b55f51cc51b541fb36cafc31023d55870e56a400f81f3f17d6c3ef30169a58883c4ead214bfbd7a1d3e374292ee21ed03f6e1caee8188327b4033bd1cdc7dc96875fe36063e3f02b737144a070e24891a18ba4df8c3b2d1bbd8e2c78cde65968c18f6300bdd0e5554e63e4f81f53233246f9baca979b7b29503ca66a21c4cde0b9647125752f5a2e5f6289d0d0daf97897be595dcf807d7ff738b4d26cb5e249f815f990a8ce3abe2ec0037f80d45d264c9ce02f9789d761b7fe2740baf3f1ed0c711288dda41a507b31f0d5a47df62b35cc476132de8c631c8de8e1d9959a6c4f21f945f720f932555e330b5ae8dda1c87437636dcf934679d64baf4583bb04e1901491111814c8836077b4863dd99ea3f5c2ff117d4503192aecb1df5328c7fb46212c6ecaac8f5d873ee3e6f1ebca9505984917547273fc475cf5dbcfde4304eb0761e5c3d416c1168816dda5d96a290e2b6c2b4ab266c15f536ad958e20f9eb495572d81ebac2099dfd4d8a4f2034367cbba76a834b9601c40a08b91d69c5192f781c255094ff648e2695151dde932551d8bfdbad4c7145ef56d2564fea1db3c341485753543c078187a3eda18a9806128e43a62c6c3456816244019e4a77e6250eaa81b8243961f6b519b7f1765fc9853a13d5c6cef416ff97a6cf992c99636baa0c86a3f50805380784a2a2b019951cbd811a6c15bef7a90965e7c6f1716e8cbdd7250e7069af21f8f1a891c6e698429a5989b6f114683a1941f87efd533ee156a113ed488eb70af2add26c9a160e6dacb15b88a8ecb97394e33cba78c2ca663d0b815629cc413c981a335eff3effa082036670b4d3b5c24ff9b842e8fc97bdb7c216d45e931be9055a82fdff06543b48d776d99c26f0fc9f66f312d2e52f18917b54d49089cd5456e83a961160b6d41e099457cbd53311ab0302de7644916b5806eede6483959ff654f6df59f2d7f1bc14fb291f2d2edf0e6619743da39e462e6b520b7142629613678644b2aa0382de8862445d3803d898c166860d1c96ebdc9d0988acc52ca3fc95565722a87f093892046e937893525ec2d2c74231692e174a64b64f01cf3fa106bbba3bbb3f61763674ab29e04c132d9820c7729e07c0d0749b2ebeb423759461116b325a17a5048499da2f015d45188c0789218c3592bd1ec0febe0edfea39336106d7000630ad09f4b5cdb720fc20e055e3ad083048b19384a308eaeb311aa3d7423d1848c7aecfa67705f131d6f6fa9d1f7db37866f235823fcf749aef3afe85bfcc234ea3aa06b28c0464ff9ca213d61ec660213cf27a36e5c3ed3dc47f7560a9810727483e0cb2153a8a78cc3d9be327c9453c2d749433b5fb18cb2c1c98b549b8641049ed88ee9da183167caecc74f019cbd97baef3d8f743b1c63a6dbddf3529227e6fabb83a55f9e2b4738642d53074d66bc0418ff568aaab0a1b064c646d6f4853f771cd66d0faa5832183a2a4f62211e03e0c07eea8e49be6f13ce589a7173c2331e4a63b6a22d5a3bb2c53fa4df4a5b5b1a19b289ee2343964c9cb3ec792c6a8e323d77ad6bdb5a7e950110a5278359cc417d218751f6cd929fdd9721cda355ada924b5a75c7612504730322d4a56bf9af78c2bceef5cd0c3484d96737257c1115284dce3b2c78f82fc267b90e7286998bbf3b6cdc48559187a6d562c54dc600a33058fafbc989af7dce37b8499618b4ef1a54e110b846638e26c099e22e2d708504eb6ddfdcfc056a831fab883ed78cb1b5426d8f276ed76d54d9629650c0aff785435ba4cc86d3613d708c4589ba9dc6769a869ee98f72aad87d223f334cd817d53cb90495c97a18812fc09200fd9e8252c3d8e8236d4ba68909f757a035a4cec67e5c3bd0e8648fc2936b86c3ae27ffceee2ed82f5f79905072ab1ce663aefe53b5f9cc0775969827ac9270f90be4b03d889dc9d87ce558f00bcb361db7a712fa8c8d32656b8006b22e90f4bad2062b4f3d7a0939eae6c965947e652ebd010e24029cebf0530214c08c5288c35b1ede2", 0x1000}, 0x1006) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0xaa775a9378789883}, 0xc, &(0x7f0000001480)={&(0x7f0000001600)=ANY=[@ANYBLOB="4b78a195e8e83f7c3459d067ec89daa86835d210e426a0c440342c79284e5a495b952fafe55d85fdc7ff68f3f53f05358613f92cbe1e4db872053d0fbb68d93feef93a3a137902d7156bbcc9", @ANYRES16=r4, @ANYBLOB="005046d08439d65b0f1104000000"], 0x3}, 0x1, 0x0, 0x0, 0x929e03169b860bbc}, 0x4000000) open(&(0x7f0000022ff6)='./file1\x00', 0x40, 0x0) 20:49:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r1 = socket(0x1, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c476828c7e4f1cd80"], 0x9}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) tkill(r3, 0x3b) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x0) r8 = syz_open_dev$mice(0x0, 0x0, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r11 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = creat(&(0x7f0000000a40)='./file0\x00', 0x90) r15 = socket$inet6_udp(0xa, 0x2, 0x0) r16 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r16, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r17 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r16, r17, 0x0, 0x400000000088001) r18 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r18, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r19 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r18, r19, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r20) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r21, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r20, 0x0, 0x12f}]) r22 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r22, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r23 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r22, r23, 0x0, 0x400000000088001) r24 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r24, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r25 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r24, r25, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r26) r27 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r27, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r28 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r27, r28, 0x0, 0x400000000088001) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0}, &(0x7f0000000d40)=0xc) getgroups(0x1, &(0x7f0000000d80)=[0x0]) r31 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r31, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r32 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r31, r32, 0x0, 0x400000000088001) ioctl$sock_SIOCGPGRP(r31, 0x8904, &(0x7f0000000dc0)=0x0) r34 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r34, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r35 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r34, r35, 0x0, 0x400000000088001) getsockopt$inet6_IPV6_XFRM_POLICY(r35, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@multicast2, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000f00)=0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001100)=0x0) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000001140)=0x0) fstat(r11, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001200)=0x0) fstat(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r42 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r43, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r43, 0xa, 0x12) recvmmsg(r44, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r43, r44) fcntl$setown(r44, 0x8, r42) tkill(r42, 0x16) r45 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r47 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r49 = eventfd2(0x0, 0x1) fstat(r49, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r51 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r47, r51, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r51, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r48, r50}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r50}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r45, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r46, r50}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r52) r53 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r54, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r54, 0xa, 0x12) recvmmsg(r55, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r54, r55) fcntl$setown(r55, 0x8, r53) tkill(r53, 0x16) r56 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r58 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r60 = eventfd2(0x0, 0x1) fstat(r60, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r62 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r58, r62, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r62, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r59, r61}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r61}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r56, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r57, r61}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) fstat(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000001340)={{{@in6=@ipv4={[], [], @dev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000001440)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r66 = dup(r65) ioctl$PERF_EVENT_IOC_ENABLE(r66, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r67) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r68, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r67, 0x0, 0x12f}]) r69 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r69, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r70 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r69, r70, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r72 = dup(r71) ioctl$PERF_EVENT_IOC_ENABLE(r72, 0x8912, 0x400200) r73 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r73, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r74 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r73, r74, 0x0, 0x400000000088001) r75 = accept$inet(r74, &(0x7f0000001480)={0x2, 0x0, @empty}, &(0x7f00000014c0)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r76) r77 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r77, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r78 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r77, r78, 0x0, 0x400000000088001) r79 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r79, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r80 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r79, r80, 0x0, 0x400000000088001) r81 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r81, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r82 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r81, r82, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r83) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r85 = dup(r84) ioctl$PERF_EVENT_IOC_ENABLE(r85, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r86) r87 = getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r89 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r91 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r93 = eventfd2(0x0, 0x1) fstat(r93, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r95 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r91, r95, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r95, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r92, r94}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r94}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r89, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r90, r94}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r96) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r98 = dup(r97) ioctl$PERF_EVENT_IOC_ENABLE(r98, 0x8912, 0x400200) r99 = signalfd4(r98, &(0x7f0000003180)={0x1f}, 0x8, 0xc1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r101 = dup(r100) ioctl$PERF_EVENT_IOC_ENABLE(r101, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r102) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r103, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r102, 0x0, 0x12f}]) r104 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r104, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r105 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r104, r105, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r106) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r107, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r106, 0x0, 0x12f}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r109 = dup(r108) ioctl$PERF_EVENT_IOC_ENABLE(r109, 0x8912, 0x400200) r110 = fcntl$getown(r109, 0x9) r111 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r113 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r115 = eventfd2(0x0, 0x1) fstat(r115, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r117 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r113, r117, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r117, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r114, r116}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r116}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r111, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r112, r116}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r119 = dup(r118) ioctl$PERF_EVENT_IOC_ENABLE(r119, 0x8912, 0x400200) getsockopt$sock_cred(r119, 0x1, 0x11, &(0x7f00000031c0)={0x0, 0x0, 0x0}, &(0x7f0000003200)=0xc) r121 = getpgrp(0xffffffffffffffff) r122 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r124 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r126 = eventfd2(0x0, 0x1) fstat(r126, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r128 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r124, r128, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r128, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r125, r127}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r127}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r122, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r123, r127}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r129 = getgid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r131 = dup(r130) ioctl$PERF_EVENT_IOC_ENABLE(r131, 0x8912, 0x400200) r132 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003240)='/dev/fuse\x00', 0x2, 0x0) r133 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r134, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r134, 0xa, 0x12) recvmmsg(r135, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r134, r135) fcntl$setown(r135, 0x8, r133) tkill(r133, 0x16) r136 = syz_open_procfs(r133, &(0x7f0000003280)='net/snmp6\x00') lstat(&(0x7f00000032c0)='./bus\x00', &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r138) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r140 = dup(r139) ioctl$PERF_EVENT_IOC_ENABLE(r140, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000003380)={0x6, 0x10, 0x0, r140}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r143 = dup(r142) ioctl$PERF_EVENT_IOC_ENABLE(r143, 0x8912, 0x400200) sendmmsg$unix(r10, &(0x7f0000003500)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)="e50ddcf9f9ef7bfd82ae6e2c30004e8cadc54a6b09415f62037735642452e0f8e11b7437c988ff9617da6213573a342b16b8580a87a1f9025009666f3f5b08ae5ece884015828453a1f43779e7c0065feabdbc7c025b3faf43bf0cab7c4863da9fbfa61feeafe0e6d3c574d78ac8f93c8b219e7770e8dac4daae2fcc1b51cbec70341987d0cebf9b545d1391e950e84d5550f95129ca1ce989736585b96279472150a38ea322bca2fd3d220896f068858598c4867736c05952e47d24873d32baef7b2081afeed7", 0xc7}, {&(0x7f0000000400)="bb10863f57df6811947c71e42ead6724742893e90ced178d17a7ecb41e0acd52c226f4c2d618e758b3c74b7c66b52d92e778673308b4d1c34577b477c38c35311f4cf0f5bcda3c038a2d7d4f876610f12b4f006d60a6c3345498f6b002f64e4e74b9fd16885cd8aa2c5fde5fa2b35eaa917411db648013aee0a8b1a7a43af566fa01472c40143b97e440ec53ce33d1ddb6ff43a37cbfbd2e700c725036df259d2305cfe141f138d7b237dfb7a5b9701edb807467a96ce896bbaa88bd9d0da639f3d535536204c7e549b83860500877bffb1ad402bb5d1754ce4848daf1bb80c28569da7e0587dcfa47e58a97d909db40d9d5e1ce66027dd29b", 0xf9}, {&(0x7f0000000500)="4e8d03ca87bd5910306b6cd234ed3e6e677dce6fa327a16a91a8088e3db9cc0ed548e44be9ec419e3342c1f5816452bde18635b6af3ef0b6b9f7a5e37a4cb855d89b1d93b61bad052154b3c0587bbf7f9b0c3d8c62834078be5120557cb88868565ccf31939a20955449e207753d2e25634b43b41bc93019c9bab9b0eb95b0e8ad7603c0bbd78e397bfb3df2ff524c2069a459c3c3f21b6ff325221890de2f685050e23f09e70091302984079a794ed2b339575b014857afd9230cac0e7bc0de4ebd93d33233baa992c02440a0424c82c0ed170da832303d01", 0xd9}, {&(0x7f0000000240)="265e3abcb4f1fdaf38e2dbdb62a51ad4d1d0a4888a347b8c6e02b23d58a547831936956b7dadce5017649eda0af1231b490be97d9d293c3297a30f24fca1a0865a05bbfd0abcdae1008d778ab8e7f8", 0x4f}, {&(0x7f0000000600)="83e9f75ebb4ad0a34fbbe55593658325870e60dfc358bf462f583b3e8f6a69f18378af2a809bb83e58dfbf11d0d34107699635aa06f89ce9c297572663b5d1ee9cb616be81435927842c836bd7f9ae62f14d2f319d05da108c0631b1136c783711179ddb09ea", 0x66}, {&(0x7f0000000080)="96ed4dbe826ab4c90fac9e", 0xb}, {&(0x7f0000000680)="b3e8d8492f29ad460d2db6ce61420e8f", 0x10}, {&(0x7f0000000740)="38f35ed9a0912950c80188cb14ff5fdf0bb1cd390cecdb6291ac672547430e1e29a66e05e951eaf1bcb653120ef05e71523d58b88f13b209f085ceb4ae7b85579a1fd48ae04321da68b0d19f923de3f42f917cfabaf9ed3a24eecca9d08ccb4847", 0x61}, {&(0x7f00000007c0)="c6d2c9868a44622f08cdf77129c386ea3e92660b06827cd6fcd58f33e8cf3bc74b284175a4782141b3ab225443c24fdb4b0ebc61183c209d2ea014955ab8112b6c0dcad206b3f50759114e894b2ce305c17f76d114031aaa203e54544060b5a06e9dfc71fefa096a309bc5b76f4561585e001fd3d365e74d44cbc645fdd7948db9308deab2bb6ebf05e6272ceba00d17fd2933641cea2a39fc502ca6296a84a665ce7683139d92d5a8af9fa8aa1afad416cfb68c9b0bb6a39544182899c562b9cebcd488d9956c22fdd67c8a1a66996e5735725395157a16042a5f519775", 0xde}, {&(0x7f00000008c0)="bf7b025ad3c5d79baf0db5811e276f042e15d413bf0cd3e7e9edbd173c3e8b757ad83bf8b8c2fedd8b355e086b33282112558a74a2520b62380af933fc13ad49794f1afd0331b4b8d7b0f1d802a40c98efb0cca91f058f4365e87bf98a456911e17a3a0ee68c3801cc7b1e877dd45a37558a68fb42e58daa68354b2aecb23e0b7c7d818eefe51b3798c80c3c39639507f287f3d0ba44", 0x96}], 0xa, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [r13, r14, r15, r16, r7, r18, r20]}}], 0x30}, {&(0x7f0000000ac0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="320cc70300b042b1881af1216fb01ce8b63161f65f693b58943cf3b03ccd665481d5227f62400da3f9f797c217d42fbc2ca449a7ac00df717dc8e631f7e2f65c8321891f5bacd4b0d89eb39b32eca9afacba3009c0a608436802f91037e848e6d5aa7ac2aa416a620285a5274606e36d59ffd3fcaa119364ca835a35de0aa626d9b25bd39f8cd4cc482089f324186eab1d85a5ef4dc513a9eafbab3c345de48220a2122c693d6429cbe74f2a1dffc189dc303483da178c7cd45268c89d3ee0b036e85447d1d145bf4a15820a493d8626eba69b63adf36613de67a63aecedb3586ea36bad2985a83b7f3f9935e85c6a90d42f5c587d", 0xf5}, {&(0x7f0000000c40)="9d5fe90c5941eb9238b32cb244681a126c0ab8ff3b29e02351fee0c9d75391316bdb6eb57e0ff24bcc8dc2f72ee94816f03ddd07354df950dc3e04a144997f90aed1f12a800cad96680b886449dc9df514b4a1bb4c612fe3458fe39c96eaeaf2c998f7bb5e699dca35e839386c1caf081a7d6a85d87048f9252d751bc85d5d", 0x7f}], 0x2, &(0x7f0000000f40)=[@rights={{0x30, 0x1, 0x1, [r4, r23, r4, r24, r5, r26, r9, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, r29, r30}}}, @cred={{0x1c, 0x1, 0x2, {r33, r36, 0xffffffffffffffff}}}], 0x70, 0x4}, {&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000001040)="48f8993ebed81ae96305a92f1485a3256b6b39c00323826d1e0779c2155b65dcc9c2da5ebdfa5e49f1d49f7bf9547d539519b75fb6ed36e3f2bea19aa4bd0f03fa3e47f074e845ec1209605371463f5482", 0x51}], 0x1, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {r37, r38, r39}}}, @cred={{0x1c, 0x1, 0x2, {r40, 0xee01, r41}}}, @cred={{0x1c, 0x1, 0x2, {r42, r50, r52}}}, @cred={{0x1c, 0x1, 0x2, {r53, r61, r63}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r64, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r1, r66, r67, 0xffffffffffffffff, r69, r72, r0, r75, r76]}}], 0xd8, 0x8000}, {&(0x7f0000001600)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001680)="0e29570a5a68a4e65816983fce7d61406f860f189c5554567c36ce05efab2835fa0c1e4bad27cc769f66ba46332a7a82ece704bf", 0x34}, {&(0x7f00000016c0)="e1c659dd57ff451a7a2d727eb0d9152ea142219eca3c7f64de5f977a33d4ec9b9a599fe79abf26f22a1480ac2ea05340c109470c40e3f1373cc7e6b16ff2fa4508fcc87e556588fbc7052dd0b1048414f4973d79dbc3d582dedd10b56f0aeb52f829ce4810da2866f432cab1928c504fd57873850770a4", 0x77}, {&(0x7f0000001740)="d070ad4f8070aa82d60117cf3a41901153cefe925663cae0bea18de8f19461acb63a17b51613d13011ebf1138b501beb539c2e7bcb583257fc0c2a8c2f31b2437aa94b0081de7f3931057c569decbbdc72d1dba81e380e6be53107a0420f14e50726c49ac77a2aa87f8659393cef505027a138ae894b51e5f1b20953d66f248c0d173820cea2", 0x86}], 0x3, 0x0, 0x0, 0x44064}, {&(0x7f0000001840)=@file={0x862664aadda319a5, './file0\x00'}, 0x6e, &(0x7f0000002c00)=[{&(0x7f00000018c0)="ce20629f13f26e7d86b6fb01ce7c672542787c2e8fc7f232ab18e87ee6a2cdf0a27f84bc438a6633184cfad2a5c921fbc1277db3012a34bb6f976ebcc9", 0x3d}, {&(0x7f0000001900)="8147991bc0690acd7f211636998b316dab5c9ff96ae05f8c1cd51a7c34ad7979e096e33866c6bbcf8d21a8ab7e5d0365c74abf49bd70980ea6581a66e0c40d82db779bf84a43fc978e73caae5513e3ee838722f890a7c462188ee30676a50e28313d04a9400352991e3941e2b36e9509ef21e1b3d91268533f6571448ee259211ff75bde5166f013d16e2b6a", 0x8c}, {&(0x7f00000019c0)="c80928a0714a177537ff7934f494e626e26b8a3ae4694f5f5dcc12bc66a8fded7b0851309c0710aef9038165468193336d1a6e0baa43d2ddb5eb5deef468e897100c4b81a20f99018719dc0a527e044b6c14eea0b1289ce63ddfd3e45f1e4c5d1324ccfa07a82b8e26f4d1c4db98fea678fb0742f7e073a9e59584c510feead305c900ac787b58e43ea16cbcb1903973cb2cd24fca0dea8c8d2d6f16dc867bb9ba5dd1cd20004d782ac28767b0a846dc59cb4f46864eea404a122a6d0efd1e3ee946b1f979d65bf86ca279c5c3d7235cf4c8abee162b5a5857ee69ddb97ee92b1699d5787f30117300e89ea9eb65", 0xee}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="f30794262c57cb308bf0c03ca0ece929bb92e1ef0a772d162ebd05a62fe27887ad74686c5979766e24f9855d5114c2886a3b83fae9738354937320b6bdf791cb9f252138c86226a4f8692d9e0f306bb60f46b262e2c0b96d5f4ea6d68309962690a6b10835fbd02e811546670b", 0x6d}, {&(0x7f0000002b40)="a7626f16048b31c74305da24f2108c0286f8a07b317387d944b2a7c2c64e9393396ba184e1e2311167a5d617a0f0", 0x2e}, {&(0x7f0000002b80)="b0b9eac5e1358e6ac6c2974f035eea0116d807f8170f7c912fd838531d251bb0ecafaa11475a69091287384c12db9f795b80d9a092164b9b55a9c8609a14740831038840d1", 0x45}], 0x7, &(0x7f0000002c80)=[@rights={{0x20, 0x1, 0x1, [r78, r79, r81, r83]}}], 0x20, 0x1}, {&(0x7f0000002cc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002d40)="ca46eeccea1d0c8397985c3efeac4722ebd5a922a3d97e79b380572e7c9ec7a002b0150ff0f2372341063fa7209c84c8982044bed309c964991eb97ce01f8ab72ceba169f7", 0x45}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00)="987a0ddcb970f019d3611506d05ea909d6168dc033e10ed8b30fa941d167328cf46816f8efd3901be7dc752fd7151e7e25267b1317ae5ea29d0d8d8eece4cf60bf8b160a8a7227333484c300771eef86f434f121123f30f777c6b10fc4f9be48b72266fa736c72767f8e0363b6f9a6dac9b9d567c6c25773e7f12178dfed028cc5ebc3e8f63b55566bcf1b3c7737e44b0317334e63a46ac4d854bd9e7ca11e2c083ca9ea325484ecbb4592895055bf54d32b976bda3d366a7a6cac2be00606ba9cf2bed9670dd2b37ff064bd2b57b40c4c6b8dd65a3291c8d03773401bf14b6b5989a727c05b4fec2f6065575355c321ace061e63033", 0xf6}, {&(0x7f0000002f00)="afc121f94cf43355167099ee8de19eb781362c91f147281b8bc0f02360b075e8e87e7df71c6e0124936a2d08b3ddedebcf354966ff3acc3c269a95a0a21bafdd4b143db88fa74f5808cad1d7b92a10c60320c303f717cd0a9da74d6efbec46cb8f9dc7306267f3a18598bb4ea5d6bc0a92cdfc9aed0a520cf06e479f58727daf0d605685efa107c1b271a0145ebfaece2422fd6886511b85ac036e255d0ea1fab6f0c8f01fec6dabc8ebe80a5923c898af160470e86259d38b88f1832d09115ca10f54bc8a86", 0xc6}], 0x4, &(0x7f00000033c0)=[@rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, r9, r85, r6, r86]}}, @cred={{0x1c, 0x1, 0x2, {r87, 0x0, r88}}}, @cred={{0x1c, 0x1, 0x2, {r3, r94, r96}}}, @rights={{0x30, 0x1, 0x1, [r99, r101, r10, r8, r102, r2, r104, r106]}}, @cred={{0x1c, 0x1, 0x2, {r110, r116, r120}}}, @cred={{0x1c, 0x1, 0x2, {r121, r127, r129}}}, @rights={{0x24, 0x1, 0x1, [r11, r131, r4, r132, r136]}}, @cred={{0x1c, 0x1, 0x2, {r3, r137, r138}}}, @rights={{0x20, 0x1, 0x1, [r141, r143, r2, 0xffffffffffffffff]}}], 0x140, 0x4004050}], 0x6, 0x20000080) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r144 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r144}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 20:49:28 executing program 1: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @local, 0x5}, 0x1c) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = accept(0xffffffffffffffff, &(0x7f0000000380)=@generic, &(0x7f0000000140)=0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x14c, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x200}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r6, 0x0, 0x400000000088001) write$binfmt_script(r6, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x104d) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) dup2(r7, r9) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r11, r10, 0x0, 0x96a8) [ 624.589912] audit: type=1400 audit(1575146968.409:1615): avc: denied { create } for pid=17707 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x5e25, @local}, 0x10) connect$inet(r2, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af05742"}}, &(0x7f00000003c0)=0x0) timer_gettime(r6, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r8) r9 = dup3(r1, r8, 0x0) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0xa154, 0x4f, 0x5, 0x7420}, {0xce, 0x1, 0x8, 0x2ae8}, {0x9, 0x1f, 0x0, 0x2}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) socket$inet6(0xa, 0x800, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) [ 624.838370] audit: type=1400 audit(1575146968.659:1616): avc: denied { create } for pid=17707 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 624.850448] audit: type=1400 audit(1575146968.659:1617): avc: denied { create } for pid=17715 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 624.945623] audit: type=1400 audit(1575146968.759:1618): avc: denied { create } for pid=17720 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 624.951168] EXT4-fs error (device sda1): mb_free_blocks:1466: group 12, inode 16547: block 393440:freeing already freed block (bit 224); block bitmap corrupt. [ 624.951235] EXT4-fs error (device sda1): ext4_mb_generate_buddy:756: group 12, block bitmap and bg descriptor inconsistent: 32512 vs 32514 free clusters [ 624.951249] EXT4-fs (sda1): pa ffff8801d6719e58: logic 0, phys. 393440, len 32 [ 624.951258] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3814: group 12, free 17, pa_free 15 [ 625.114972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26222 sclass=netlink_route_socket 20:49:29 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r0, 0xb) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlock(&(0x7f00000c9000/0x4000)=nil, 0x4000) syz_genetlink_get_family_id$tipc2(0x0) [ 625.439745] audit: type=1400 audit(1575146969.259:1619): avc: denied { create } for pid=17709 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:49:29 executing program 5: syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) socket$netlink(0x10, 0x3, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1000000000000002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1000000000000002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2b) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) dup(r0) r3 = socket(0x100000000011, 0x2, 0x0) dup(r3) epoll_create1(0x0) epoll_create1(0x0) epoll_create(0x401) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) [ 625.551158] audit: type=1400 audit(1575146969.369:1620): avc: denied { create } for pid=17715 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 625.608192] audit: type=1400 audit(1575146969.429:1621): avc: denied { create } for pid=17709 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 625.663251] audit: type=1400 audit(1575146969.479:1622): avc: denied { create } for pid=17720 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141006, 0x2) fallocate(r2, 0x0, 0x0, 0x80006cf) 20:49:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@dev, @in6=@rand_addr="fba9960aa1d31182187f080bb5cd02a5"}, {@in6=@empty, 0x0, 0x33}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@etimer_thresh={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) [ 626.187054] audit: type=1400 audit(1575146970.009:1623): avc: denied { create } for pid=17709 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:49:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) signalfd4(r1, &(0x7f0000000180)={0x7}, 0x8, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000580)="680c7df925472a34641fd3fa64ec5ea083b2c2ec2ea18632d4df0de1984b50bbfbdb778b28affddbf11790e001f933e0f437ee100d8936b9651f3969d50ed3dd1091eaf7279ea053ac960720f519cd88796d7cad1b7e133620c48c029001747e3f6f1ab1f5b2fa65a29e8c9d76b569031fb6bf0929ea6d0363a864ddbf65f44d90e604cc46a4763b9902999b20ec954cc272fe93723efbaf01d24a161c66b85d0491fe2ab3c0a0ab75b762124f77263edb386e24990a3820fdefe7d31dc16b1f95dc82c019d1e355976785d44a", 0xcd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) write(r2, 0x0, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000400), 0x1, 0x0, 0x0, 0x76de17f1d04e1ec9}, 0x0) r5 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) setxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000400)='TRUE', 0x4, 0x3) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4) lseek(r7, 0x0, 0x0) pipe(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESHEX], 0x4240a5bb) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/s\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'erspan0\x00', r13}) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2400c000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x1c0, r12, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2c}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8001, 0x77, 0x96, 0x81}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xf47d}}, {0x8}}}]}}]}, 0x1c0}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000011c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f00000012c0)=0xe8) getsockname$packet(r10, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) r17 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r17, 0x10, &(0x7f0000000400)) fcntl$setstatus(r17, 0x4, 0x6100) r18 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r17, r18, &(0x7f0000000040), 0x8000fffffffe) writev(r17, &(0x7f0000000680), 0x0) r19 = socket$inet6(0xa, 0x480040004000, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r17, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r19, 0x29, 0x32, &(0x7f00000028c0)={@dev={0xfe, 0x80, [], 0x24}, r20}, 0x14) getsockname(0xffffffffffffffff, &(0x7f0000001480)=@can={0x1d, 0x0}, &(0x7f0000001500)=0x80) sendmsg$TEAM_CMD_NOOP(r9, &(0x7f0000001780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80001400}, 0xc, &(0x7f0000001740)={&(0x7f0000001540)={0x18c, r12, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r15}, {0x124, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xba6c}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r20}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r21}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x2401088d}, 0x0) r22 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r24 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r26 = eventfd2(0x0, 0x1) fstat(r26, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r28 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r24, r28, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r28, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r25, r27}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r27}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r22, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r23, r27}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r29 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r31 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r33 = eventfd2(0x0, 0x1) fstat(r33, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r35 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r31, r35, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r35, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r32, r34}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r34}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r29, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r30, r34}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r36 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r38 = eventfd2(0x0, 0x1) fstat(r38, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r40 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r36, r40, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r40, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r37, r39}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r39}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r41 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r41, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r42 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r41, r42, 0x0, 0x400000000088001) getsockopt$inet6_IPV6_IPSEC_POLICY(r41, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r46 = dup(r45) ioctl$PERF_EVENT_IOC_ENABLE(r46, 0x8912, 0x400200) accept4$packet(r46, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14, 0x1800) r48 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r50 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r52 = eventfd2(0x0, 0x1) fstat(r52, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r54 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r50, r54, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r54, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r51, r53}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r53}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r48, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r49, r53}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r55 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r57 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r59 = eventfd2(0x0, 0x1) fstat(r59, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r61 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r57, r61, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r61, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r58, r60}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r60}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r55, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r56, r60}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000780)=0xe8) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000980)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000b00)={@multicast1, @initdev, 0x0}, &(0x7f0000000b40)=0xc) r66 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r68 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r70 = eventfd2(0x0, 0x1) fstat(r70, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r72 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r68, r72, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r72, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r69, r71}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r71}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r66, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r67, r71}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r73 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r75 = eventfd2(0x0, 0x1) fstat(r75, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r77 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r73, r77, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r77, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r74, r76}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r76}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r78 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r80 = eventfd2(0x0, 0x1) fstat(r80, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r82 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r78, r82, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r82, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r79, r81}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r81}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r83 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r85 = eventfd2(0x0, 0x1) fstat(r85, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r87 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r83, r87, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r87, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r84, r86}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r86}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) getpeername$packet(r1, &(0x7f0000000b80)={0x11, 0x0, 0x0}, &(0x7f0000000bc0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000c00)={0x638, r12, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6b90}}}]}}, {{0x8, 0x1, r23}, {0xfc, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r37}, {0x124, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x8, 0x2, 0x1, 0x74}, {0x75, 0x40, 0x5, 0x7}, {0x6, 0x1, 0x6f, 0x6}, {0x6, 0x8, 0x4, 0x1f}, {0x0, 0xff, 0x1, 0xffffffff}, {0x1, 0x4, 0x4, 0x81}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r43}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r44}}}]}}, {{0x8}, {0x1ec, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r47}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r49}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r56}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfffeffff}}, {0x8, 0x6, r62}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r63}, {0x128, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r64}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r65}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r67}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r74}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r79}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20000}}, {0x8, 0x6, r84}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r88}}, {0x8}}}]}}]}, 0x638}, 0x1, 0x0, 0x0, 0x2008008}, 0x984) r89 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r89, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r89, &(0x7f00000092c0), 0x4ff, 0x0) 20:49:30 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5273c1d6fc50f5a6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) socket(0x0, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x3, 0x5, 0x2) getsockname$packet(r4, &(0x7f0000000040), 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x23}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x27}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x83950118}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000300)=""/218) r5 = socket(0x100000000011, 0x2, 0x0) getpeername$packet(r5, &(0x7f0000000b00)={0x11, 0x0, 0x0}, &(0x7f0000000b40)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000b80)={@rand_addr="e7f9ac5c67afb03ec8b60373a209aab6", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3, 0x800, 0x7, 0x0, 0x7, 0x400003, r6}) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x346) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r1, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r9) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x9) r11 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r11, 0x2081fc) r12 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r12, 0x0) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0xf642e7e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) write(r12, &(0x7f0000000400)="ff38ffd7356ea9c8e8d66d78698115307e35be8b7b9c298bfe9478ef1685be5c03031c6551a9511ec9bce4c73f8a7597cca9ef685a6fd70eb6e040e481a0e3b2a4a78e48dea91fe541244968a3a886f2d8ff8db24792eadca8992182e5057fec32eeac706b327beaf4a14e0bf29c34fe102b492f64e60d704baa43a3c80d0000f328c244daf8791bc85229793bcb4d3d4ade369bc6fb2b41ef5c49ca30adfc0ca9667e079fd64b9b117b00f76124ba509db0935cd699d12353a9475790486e5afabd4bc3b7", 0xfffffdf4) [ 626.426767] audit: type=1400 audit(1575146970.249:1624): avc: denied { create } for pid=17709 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:49:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x442, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0xffff}}, 0xa0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r5, 0x29, 0x0, 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000440)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000400)='security.capability\x00', &(0x7f00000005c0)=@v3={0x3000000, [{0x8, 0x1}, {0x6e, 0x71f40d98}]}, 0x18, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000140)={0x5, 0x6, 0x100000001, 0x10340, 0x5, 0x6}) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioprio_set$uid(0x0, r7, 0xfff) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="0b010900a1000000260300000700000076010000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bac7be9c1cbb8143030d200"/543], 0x220) ftruncate(r10, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) 20:49:30 executing program 5: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000100)) lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U-', 0x6}, 0x28, 0x3) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) statfs(&(0x7f00000001c0)='./bus\x00', &(0x7f00000004c0)=""/176) lseek(r1, 0x0, 0x2) sendfile(r1, r4, 0x0, 0x8000fffffffe) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001cc0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000040)=""/52) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/status\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x218302, 0x142) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8947, &(0x7f00000001c0)={'ip6tnl0\x00', @ifru_mtu}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./bus\x00', 0x6, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r1, r4, 0x0, 0xa5cc554) 20:49:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r3, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000080), 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(r1, 0x4, 0x44800) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/context\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r6 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r6, r7, 0x0, 0x400000000088001) r8 = ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r9) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r10, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r9, 0x0, 0x12f}]) r11 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r11, r12, 0x0, 0x400000000088001) r13 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r14 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r13, r14, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r15) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r16, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r15, 0x0, 0x12f}]) r17 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r17, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r18 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r17, r18, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = eventfd2(0x0, 0xe8a29af4845a6f99) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r23, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r24 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r23, r24, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r26 = dup(r25) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) io_submit(r16, 0x21, &(0x7f0000001e00)=[&(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x5, r17, &(0x7f0000001940)="a0c600161acbd25c772846c227c3e10fde0777dba3b6fccd07b22c322d486761161cbfde70576410d336002707e48c5764e28baf2cf7cda28e0e972ac75836d37f388e125d55283fdbd2ec32b29aae269c9db5262ed415004d69c3", 0x0, 0x6, 0x0, 0x1}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x7, 0x3, r5, &(0x7f0000001a00)="cf4f1b3e46", 0x0, 0xfffffffffffffffc, 0x0, 0x0, r20}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x8, 0x1, r8, &(0x7f0000001a80)="699b856bd247377ee948e7580dadf847bd9ca9af4549f90ba05a633b1d6fce7780f24dfd358ff592ad2a849d245d75fa0c1b099e3181c8e5ba2d6bdf65b9b802d35a365d4e96eca848778399b40ccb080d7ba58ce9cca9c713302be669f5d42f80245137", 0x1c7, 0x2000000000000005, 0x0, 0x1, r21}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x6, 0x100, r22, &(0x7f0000001b80)="86d1c94b6806c1d34a4ab6bda9d05a94f6e1a1759ea6af0d106f3906622fc4120d0a608763403a26f0c29ea299fa355d15c3a213a177e1bf8180eb93fbdc42683f154cf8060dc0fffa92f0ed5426184b28d624d80d234be7babaedc5d5c34d3a370ee6eca3648acddeff8db6547058cce99aac379d763833eb5deabfaefc806af397d4e8dfd06ca7386ab3c2f172bbe98be450e9816781bb636791c27e578d2e0031bc8f66872ce767429689", 0xffffffbb, 0x7f, 0x0, 0x3}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, r23, &(0x7f0000001c80)="54466547938c864340ad511cbfbfb48466cfb002112a57c171c0324b411ffe2bf663adcf1e066134a0a556e3d955f30e80234e65e93df52885e0daca67822daea6aa4c0b2c2fed1d741910333a30cf45738191420241318157dba72e4100128ae6861cd046a3f7f67bc3d34195b6ee6243150f7b81ce614584b3cd34a6f5466eaddc55754633141faa37ed9fea6b84968e54f895eb0a9ec06ffa43a84420d150edca682dff5de3060a87ae49c3e6fc8f4c1585bc48adb8e55422f06c7987aafac7bf3470ee3abbc317c13832f0801a321af800b1f283e557359854119c46e5434c6add47341715a6af3b2ebe46aedca9f4b39b0ec944", 0x0, 0x3, 0x0, 0x0, r26}]) r27 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r27, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r28 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r27, r28, 0x0, 0x400000000088001) write$FUSE_INIT(r28, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x5, {0x7, 0x1f, 0x2, 0x1000000, 0x8, 0x0, 0x400, 0x7f}}, 0x50) gettid() 20:49:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='schedstat\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), 0x0, r0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') io_setup(0xffffff80, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000140)="b35126b324957999f3b87f536baf9b2d4903e7e3842e7733a8f612da0fdffb45636a6f6a46fcfdab59230252a30c708f05f03dabdc39bf85c1e6d391700be904537208d354051ae17c01b60f8171fe782d8a34caf88551c1399b8e9cdc64a8633e885ce87cad508581db84ffd708193fb26d6d265f846ec7ef30b02157da8294ce985b1791d77433d3d86c8f4196d72f8f4ae6d6d5409e487aefc10312ec2ced3c1442", 0xa3, 0x800}, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0x12f}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r5) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r5, 0x0, 0x12f}]) r7 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r7, r8, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r9) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r10, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r9, 0x0, 0x12f}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = signalfd4(r0, &(0x7f0000000500)={0x3}, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) io_submit(r4, 0x5, &(0x7f0000000780)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0xff, r5, &(0x7f0000000340)="ccdd45822bc00299cc8f598084d32501f5a1ba7c765df7ce436eb95904fe5e041b6296902f4c9ade8ed797365a194b25f0ba37c45d17585d80e22e6b00b920566b18d94fe3c008d2cbb3d03ed17358b0cfdca0cbc34323b377ebcd79e307eee368d61288860ab1d73389c0d7488cba9a516121711417a09fed79cae5b09aebb6ddca4fe1a38d1357e853bcaaa7b2bfc347b9505ff3c8087f547aa90822adb46a4b95f25bec073e1553b2ab641dcfa708bbe89471f295e2b8c3f94e1f2993a359cf55ce8757ee30014ccb06a223903d88aac6dc7a2a47f5f02bd0f6f6b2cd2a8c541a7e2d55b03546f88660110f33e35f766b3c0f8ff698", 0xf7, 0x401, 0x0, 0x1, r8}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xa8e9, r9, &(0x7f00000002c0)="6faf1ce52d398090f1ad5330f93e847e227d5b3da4899da0df9e98117f3cf84cdb4e24359a64d2912a3f75c7abe26199d86676688b", 0x35, 0x4, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000480), 0x0, 0x80, 0x0, 0x0, r12}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x7, r13, &(0x7f0000000540)="aeb4dc9bfcd1107f2460a68a4ed835aec6f743343c9521e17df87a387c3e2182a30a36bad3dd791413fd88469d4933fcafa0eb70470d78ae2f3f1d90349714adf6095c9239eeb59ed0781c59647eb907720431ec8f9b4917bb5a433221d21010181e913ab6551dce9ba19e8a488a693c1c3ac1f5ce654edd23fa24d64d98d14503b8e1f482a5c9278f66c34b7d04ed8d97117e8557fbab3661af8d9adf3d8415d7ac78e4edc2f82648c976308f934e389603fcdca8d493f9589535d1e0a7f992ed21fe3fd777f2d86bb8df14af8bc7fd6f297d90b5e3ed3fcc0e0e", 0xdb, 0x9, 0x0, 0x1, r15}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x45, 0xffffffffffffffff, &(0x7f0000000680)="593e6e2b5a668559e37437534f6a33f3ceeba996147206855509249e5f8a30e795edee75b93a74ec87dde6e72116e18e2d845079048a1f38335db862983eeadfe106beb84ca034d5c770159defb264d8776d3a343d236c508c12bde7a2b4725ad63ecebcf128962dda68094597fa524ecaadc6898714dcdfcba0564b2b55f9462289152ff6b8d676c681fc352ee6cc1dc051f5800094666ca181bcc326c9fb34b8f6458b3201b85223d7eaab6a11c3f81af7d5b6a21f55d69820b5fa", 0xbc, 0xffff, 0x0, 0x3}]) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6) 20:49:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000040)=""/22, &(0x7f0000000100)=0x16) sendmmsg$inet6(r0, &(0x7f0000007c40)=[{{&(0x7f0000000080)={0xa, 0x4, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000002900000039000000000202010000000000000000f7947a8b"], 0x20}}], 0x2, 0x0) 20:49:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000013c0)=ANY=[@ANYRESOCT, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="001000000000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0010000000000000"], 0x0, 0x0, 0x0}) 20:49:34 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x1, 0x40, 0x0, 0x68eb}, {0x3c}, {0x200000000006, 0x0, 0x0, 0xfffffffffffffffc}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000200)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:49:34 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) fcntl$setsig(r0, 0xa, 0x3a) dup(0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x10}, 0xffffff9a) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r1, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000000)=r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000240)={@remote, 0x56, r8}) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r3, &(0x7f0000000380), 0xfffffffe) accept(r3, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000180)=0x80) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r10 = accept4(r2, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet6(r10, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 20:49:34 executing program 0: r0 = socket$packet(0x11, 0x2000100000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000040)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r4, 0x0, 0x400000000088001) fsetxattr$security_smack_transmute(r4, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x0) sendfile(r1, r2, 0x0, 0xedc0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000001c0)) [ 630.587924] audit_printk_skb: 39 callbacks suppressed [ 630.593169] audit: type=1400 audit(1575146974.409:1638): avc: denied { set_context_mgr } for pid=17831 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 20:49:34 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x31, &(0x7f00006ed000), &(0x7f0000000080)=0xffffffffffffff5c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1a401, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x1, 0xffffff80, 0xc0fb, 0x0, 0xe8, 0x10001}) [ 630.735190] binder: 17831:17836 ioctl 40046207 0 returned -13 [ 630.782442] audit: type=1400 audit(1575146974.599:1639): avc: denied { set_context_mgr } for pid=17831 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 20:49:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x4000000000000d, 0x319, 0x70bd27}, 0xb}}, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000180)={0xad59, {{0xa, 0x4e24, 0xfffff89b, @loopback, 0x101}}}, 0x88) [ 630.858961] binder: 17831:17840 ioctl 40046207 0 returned -13 20:49:34 executing program 2: getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)=0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xfffffffffffffd22) r3 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r5 = eventfd2(0x0, 0x1) fstat(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r3, r7, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r4, r6}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r6}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r2, r6}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r10 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r12 = eventfd2(0x0, 0x1) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r10, r14, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r14, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@getpolicy={0x11c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x0, 0xa2, r11, r13}, 0x6e6bb4}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0x17}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@local, 0x4e24, 0x5, 0x4e23, 0x7, 0x2, 0x20, 0x3ec55fc69f3e756d, 0x16, 0x0, r13}, {0x101, 0xffffffff, 0x7fff, 0x0, 0xd93, 0x24a640, 0xfffffffffffffff9}, {0x0, 0x6, 0x1, 0x7f}, 0x1ff, 0x6e6bc0, 0x3, 0x0, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r9, r13}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) r15 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r17 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) r19 = eventfd2(0x0, 0x1) fstat(r19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r17, r21, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r21, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf25ff020000000000000000000000000001ac1414bb0000000000000000000000004e2100004e20000700008000a2000000", @ANYRES32=r18, @ANYRES32=r20, @ANYBLOB="b46b6e00000000000c001c00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="0101000000000000ffffe3f1f997f8ae70f2ffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000000300000000000000ff010000c06b6e0003000100000000004837be6078d2550982c3d27c0469b8ca58972b949c6258824534d1945409d47ae2c9bfa56d61b9a35c23191234a480d371538db37784f1f685b7ec256fe2d6330fc06c5085f56a8b9fea5b157959babe201290f8db95a780babfdbe6a4ba1e7cb694a33eba4f467f1d665046f25e4f48"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r16, r20}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r23 = dup(r22) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r27) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r30) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r31) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r0, @ANYBLOB="02000200", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r13, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r20, @ANYBLOB="040003000000000008000700", @ANYRES32=r24, @ANYBLOB="080004006581e5f882ac499e695c380b1dcc386ba8184ca92249d907b0e1cc4036156745e046ba51cb5b3423648843da8f2fb52fc767fbf00b4ef32102d4f838251d835bc3ca49131dc7710fcee57fc1812fabff4a4a6481b29b0ccdcdbb60600996e53fc11d19a2456f06ede354c8d28e77ea9ff1ee78e1f5946ea64251dbb868414f41f65343f4fbccd457dc098acee7086b506af57158f1e3b2b61a34ca55e70ccd4dbe4e750140d86548dc0d36cf00e1d2a417a7c462ce55dbdf2edd46a4b971fad8a548a001084d4782a07d0f203a3086d46b79839679702b445915138665555aad36f00c32fd8496be8c76b31124505800"/259, @ANYRES32=r25, @ANYBLOB="08000400", @ANYRES32=r26, @ANYBLOB="08000600", @ANYRES32=r27, @ANYBLOB="08000200", @ANYRES32=r28, @ANYBLOB="0800a694", @ANYRES32=r29, @ANYBLOB="08000400", @ANYRES32=r30, @ANYBLOB="08000300", @ANYRES32=r31, @ANYBLOB="10000000000000002000020000000000"], 0x8c, 0x2) r32 = socket$packet(0x11, 0x2, 0x300) r33 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r33, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r34 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r34, 0x1, 0x7, &(0x7f0000000080), 0x4) r35 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r35, 0x8933, &(0x7f0000000140)={'veth0\x00\x00\x00\f\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r34, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r36}) connect$inet6(r34, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e61c640e2d526900"}, 0x1c) sendmmsg(r34, &(0x7f000000ac80), 0x800000000000226, 0x0) dup3(r32, r33, 0x0) [ 631.278927] audit: type=1400 audit(1575146975.099:1640): avc: denied { create } for pid=17854 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 631.348019] audit: type=1400 audit(1575146975.169:1641): avc: denied { create } for pid=17854 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 631.393545] audit: type=1400 audit(1575146975.209:1642): avc: denied { create } for pid=17863 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 631.506607] audit: type=1400 audit(1575146975.299:1643): avc: denied { create } for pid=17854 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:49:35 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}], 0x1c3, 0x0) readahead(r3, 0x221, 0x0) [ 631.668979] audit: type=1400 audit(1575146975.489:1644): avc: denied { create } for pid=17863 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 20:49:35 executing program 1: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r4, 0x0, 0x400000000088001) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000040)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r5 = open(&(0x7f0000002000)='./bus\x00', 0x1512c2, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) ftruncate(r5, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r8 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write(r7, &(0x7f00000001c0), 0x1892277a) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r9, &(0x7f00000003c0)) write$P9_RRENAME(r7, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) sendfile(r1, r5, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) nanosleep(&(0x7f0000000100), &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r7, 0x0) 20:49:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) memfd_create(&(0x7f00000001c0)='\xb3', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0x12f}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r5) io_setup(0x6, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$packet(0x11, 0x10000000003, 0x300) getsockopt$packet_int(r7, 0x107, 0xe, 0x0, &(0x7f0000000080)=0x6ea) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0xfdcc0b5c33f15000, 0xa1, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r9}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r10) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r11, 0x1, &(0x7f0000000400)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r10, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r12) 20:49:35 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x2, 0xc1) r0 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r1) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = timerfd_create(0x9, 0x80400) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x430202, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000280)={0x7fff, 0x8, 0x0, 0x1}) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') [ 632.094005] audit: type=1400 audit(1575146975.909:1645): avc: denied { create } for pid=17879 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:36 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x346, 0x0, 0x0, 0x0, 0xfffffd07}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) [ 632.179351] audit: type=1400 audit(1575146975.999:1646): avc: denied { create } for pid=17854 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 632.218379] audit: type=1400 audit(1575146976.039:1647): avc: denied { create } for pid=17854 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:49:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x4}}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r1, r3, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200), 0x4) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="9427aff21d3b29ff427f2564000000"], 0xf) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) nanosleep(&(0x7f0000000280)={r6, r7+30000000}, &(0x7f00000002c0)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$setperm(0x5, r9, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r9}, &(0x7f0000000800)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613531322d617678320000000000000000000000000000eb4ef97d6dadfa6b9a8d54df0121001700000000000000000000080000000000000000ec00000000b872e56dea72113aa5f0353fd2ecb20ef99991c93f01a5673c0a4c30434c325edc52e3ef8760a5d09a4ea06dddb7af7ae9536d0c4d05a05f409552e00ad4dd6d08f01c891cf7e99f54bc9f1c63d1311006e57c4746e1db28cd586d0f17e107d7db911d7bcf"], 0x0, 0x0) r10 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$setperm(0x5, r10, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r10}, &(0x7f0000000540)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613531322d6176783200000000000000000000000000000000000000000000000000000000000000000000000000000000b872e56dea726300"/85], 0x0, 0x0) r11 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$setperm(0x5, r11, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r11, 0x197}, &(0x7f0000000540)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613531322d6176783200000000000000000000000000000000000000000000000000000000000000000000000000000000b872e56dea726300"/85], 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300)={r9, r10, r11}, &(0x7f0000000400)=""/201, 0xc9, &(0x7f00000005c0)={&(0x7f0000000340)={'crc32\x00'}, &(0x7f0000000500)="28828bcae16b0a3501bf8a5c61742fca0316ffc42d1c47a271e0c5e2ebd0f1f273547f21b7a52c9b8b8e7e20dc522ab6de27b930aef214d78152f26b9b42b4888ffcfa6d54523fefa6433bc9c86dd42a69987f5782f92f1106", 0x59}) write(r8, &(0x7f00000001c0), 0xfffffef3) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f00000001c0)={0x3f, 0x7, 0x5}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 20:49:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/70, 0x46) getdents(r0, &(0x7f00000020c0)=""/45, 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) fcntl$dupfd(r3, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r0, &(0x7f00000000c0)=""/193, 0xc1) 20:49:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x668e038e7819070d, 0x100) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000c}) ftruncate(r1, 0x1c08) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0x30) read$FUSE(r2, &(0x7f0000000740), 0x1000) 20:49:37 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0x7ff, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) ftruncate(r1, 0x48280) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f0000000580)="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", 0x315}]) ioctl$RTC_AIE_ON(r3, 0x7001) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffd, 0x7}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 20:49:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() readv(r3, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r9, 0xa, 0x12) recvmmsg(r10, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r9, r10) fcntl$setown(r10, 0x8, r8) tkill(r8, 0x16) write$FUSE_LK(r7, &(0x7f0000000040)={0x28, 0x0, 0x8, {{0x0, 0xffffffffffffff15, 0x0, r8}}}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r11, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r11, 0xa, 0x12) recvmmsg(r12, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) r13 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r14, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r14, 0xa, 0x12) recvmmsg(r15, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r14, r15) fcntl$setown(r15, 0x8, r13) tkill(r13, 0x16) rt_tgsigqueueinfo(r13, r4, 0x22, &(0x7f0000000100)={0x35, 0x400}) dup2(r11, r12) fcntl$setown(r12, 0x8, r5) tkill(r5, 0x16) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000000)={0xffffffffffff9d01}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:49:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r2, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda) recvfrom$inet(r2, &(0x7f0000000440)=""/98, 0xffffffffffffff55, 0xc0000182, 0x0, 0xffffffffffffff3c) read(r2, &(0x7f0000000000)=""/257, 0x101) 20:49:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) gettid() r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) read(r1, &(0x7f00000001c0)=""/147, 0x93) r3 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) write$FUSE_LK(r4, &(0x7f0000000040)={0x28}, 0x28) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) write$ppp(r5, &(0x7f0000000740)="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", 0x1000) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30}, 0xb0b8) 20:49:38 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:49:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='em0)[vmnet0md5sum\x00', 0x0) ftruncate(r1, 0x40000) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x323) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x67) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r3, 0xa, 0x12) recvmmsg(r4, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x16) ptrace$cont(0x8bab11ffb6ad46c, r2, 0x400, 0x3521) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7fffffff) sendfile(r0, r1, 0x0, 0xffe4) 20:49:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) r9 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) r11 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r11}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000018c0)={0x108, 0x0, &(0x7f0000001680)=[@increfs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/77, 0x4d, 0x0, 0x13}, @fda={0x66646185, 0x9, 0x0, 0x20}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000003c0)={0x0, 0x28, 0x48}}}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r11}, @enter_looper, @dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001400)={@flat=@weak_binder={0x77622a85, 0x9, 0x1}, @flat=@weak_handle={0x77682a85, 0x5, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/4096, 0x1000, 0x1, 0x5}}, &(0x7f0000001480)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x40f957d4104be954, 0x0, 0x0, 0x60, 0x18, &(0x7f00000015c0)={@ptr={0x70742a85, 0x0, &(0x7f00000014c0)=""/238, 0xee, 0x2, 0x17}, @fda={0x66646185, 0x7, 0x2, 0x35}, @fd}, &(0x7f0000001640)={0x0, 0x28, 0x48}}, 0x40}, @exit_looper], 0xc1, 0x0, &(0x7f00000017c0)="b7c59108d9de2d57c7b8b44241d382545c70b787b7a8c04b654f9bc3b1e2c4876246ce16aa106f61e54d7ce590295ec5581ee1b0d4c8adf9c1d68b88a044a97b8e0f7eaa2c379fd6ebc03f3c72abd1da73525cf5c173b9e71cdc3a50d16ccffddcdc5461f036f9890a525ae8341502bd577518a98a5162abdef7570b7b50a11c121242f1c58be12e5a8248277322f7fde38f96e41480d2d81ed26b5dbcd5615099e28a389bb0fb157b914f0249a00f130f80d260d0ee929b2c7cb389c37777ae04"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r12 = fcntl$dupfd(r0, 0x203, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x40000008}) r13 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r14, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r14) r15 = timerfd_create(0x0, 0xfffa5f8f45aa7415) fstat(r15, &(0x7f0000000200)) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r16) dup2(0xffffffffffffffff, r16) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r18 = dup(r17) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) openat$cgroup_ro(r18, &(0x7f0000001900)='cpuacct.usage_all\x00', 0x0, 0x0) r19 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r19, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r20 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r19, r20, 0x0, 0x400000000088001) dup3(0xffffffffffffffff, r19, 0x140000) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) write$binfmt_misc(r13, &(0x7f0000000000)=ANY=[], 0x323) r21 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) sendfile(r13, r21, 0x0, 0x8fff) 20:49:39 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe2(0x0, 0x0) pipe(&(0x7f0000000000)) inotify_init1(0x0) write(0xffffffffffffffff, &(0x7f0000000380)="07eb4aaa2a39cbcb2f0b3a8da322e4a9d2559433f3e3ba86945dd806000000b9901570e60cd5f5225e3f849be4cc8d40", 0x30) pipe(&(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_GET_PDEATHSIG(0x2, 0x0) creat(0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$getown(r1, 0x9) fallocate(r2, 0x40, 0x3, 0x6b1) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = open(&(0x7f0000000140)='./file0\x00', 0x54042, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r7, 0x4c02, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, 0x0) write$P9_RLERROR(r6, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r8, @ANYRESDEC=r9, @ANYRESOCT, @ANYRES16], 0x1041) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r10, r0) sendfile(r4, r5, 0x0, 0x80000001) 20:49:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x21000000802}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x3a, 0x0, @thr={&(0x7f0000000100)="73005fd07ce60d730ba69a52a07ff4a05a83ba0d6503473bf0dcb9a4bc1dc7266769a80e215fbbc00e284d790a46017cae015f2298dbc30b9989e8975cfcb03d16a7161a3df03429", &(0x7f0000000180)="5e44edce6754c697abc47c7029301dfbba7e3315b009121306ac9dae5b2340dffbeb935bcb576f78e458345c31ea51df8ea760d3097b83793a01ee030b87fadb1c673bbd341de2cc4ad9f696f0585a37c802a12853b06393bfa053185b2a25e51c89dda400cda2c07bba433d2a0de54b355117b9bd687f2c394950974fc57386b90cfe5e144dce5a563f46586fefdd7912058106cac54e06d328d5f46a279406be414930aeaf849b3d57d9fdab07dbf1fc"}}, &(0x7f0000000240)=0x0) timer_gettime(r1, &(0x7f0000000280)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @rand_addr=0xffffffffdffffffc}}) 20:49:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x16040}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x16c, r2, 0xc90ddacaa97d025, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1d7}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x401, @mcast1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={[], [], @rand_addr=0xcf1}, 0x80000001}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc}, 0x20000000) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) creat(&(0x7f0000000000)='./bus\x00', 0x0) 20:49:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x48441, 0x0) ftruncate(r1, 0x200005) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00', 0x4fff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'gre0\x00', 0x4fff}) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x10001) [ 636.827244] audit_printk_skb: 9 callbacks suppressed [ 636.861349] audit: type=1400 audit(1575146980.639:1651): avc: denied { create } for pid=17981 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'lo\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffff8}}) [ 637.094431] audit: type=1400 audit(1575146980.909:1652): avc: denied { create } for pid=17981 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:41 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x80000) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'ip6tnl0\x00', @ifru_settings={0x7, 0x7, @te1=&(0x7f0000000200)={0x800, 0x9f, 0x81}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x410820, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') flock(r0, 0x1) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) r10 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r10, r11, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = signalfd4(0xffffffffffffffff, &(0x7f0000001500)={0x3}, 0x8, 0x80000) r15 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r15, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r16 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r15, r16, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r17) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r18, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r17, 0x0, 0x12f}]) r19 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r19, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r20 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r19, r20, 0x0, 0x400000000088001) r21 = open$dir(&(0x7f0000001540)='./file0\x00', 0x100, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r22) r23 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r23, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r24 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r23, r24, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r25) r26 = signalfd4(r25, &(0x7f0000001580)={0x6}, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r28 = dup(r27) ioctl$PERF_EVENT_IOC_ENABLE(r28, 0x8912, 0x400200) r29 = socket$inet6_udplite(0xa, 0x2, 0x88) r30 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001680)='/dev/rtc0\x00', 0x800, 0x0) sendmsg$unix(r11, &(0x7f0000001640)={&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xee, &(0x7f00000014c0)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="c13e790736785244065cb3ca80f913355d5630930037269775d301098fa9071a6f95af8ae8be2c1ff302a2095be3", 0x2e}, {&(0x7f0000001440)="40a3414ad94e88b508a650341d0befb2aa6c36d6cdf5e69fabad89b20df4866a19c1c43599a4027b3766d512ec0628037dec112040338476394d4c654d848233a5ae0067b22e4a83e4396a6b0899adfc40944b5fd32f0e1ba21c9aa2ce30f5e09307d8e26533f8e40d766995e94d", 0x6e}], 0x100000000000013b, &(0x7f00000015c0)=[@rights={{0x38, 0x1, 0x1, [r13, r14, r15, r17, r19, r21, r8, r4, r22, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r30, r24, r26, r28, 0xffffffffffffffff, r3, r29]}}], 0x68, 0x850}, 0x24050043) fcntl$dupfd(r9, 0xa8b1beed2beb02b, r6) preadv(r7, &(0x7f0000000700), 0x31f, 0x10400003) 20:49:43 executing program 1: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') pipe2(&(0x7f0000000000), 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000140), 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) pipe2(&(0x7f0000000140), 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="04de0f050502f0e6f30f3401"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) keyctl$assume_authority(0x10, r2) 20:49:43 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x3, 0xfffffffffffffcef) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000d12ffc)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000300)={r2, 0x0, 0x3, 0x14, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(0xffffffffffffffff, 0x20, 0x5, &(0x7f0000001440)=""/4096, &(0x7f0000000240)=0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x2}) r5 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x8942, &(0x7f00000001c0)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @cisco=&(0x7f00000003c0)={0x10001, 0x2c27db89}}}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r6, &(0x7f0000000700), 0x31f, 0x10400003) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f5800fe01b2a4a280930a06000000a84599910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de44b2ee3b2733c9237f8d621a4559e65517b3", 0x55}], 0x1}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x86, 0x401}]}, 0xc, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e21, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x32, {0x2, 0x4e20, @rand_addr=0x1}, '\x00\a\x00'}) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000045ddf58abe526559e71349bb3e0c1e910a0b2b410d8bec09c518daa78d35f30c90e303b4f01fcf00242209a92af1d85b4c1fb6b134ace2b235d9b743b6cd4c0bb324bcf475ada427bcf2ed2cce34d097410593e8bbefdd1f214f34f19782a946903fc082a3429559e77dcc5b052b8245ce4d81c63abb3b8f6febbc87997d70d7e224444e62c1b789528ab9af252ed1ac758fee2a30a1bf323fbf91f9052e", @ANYRES16=r7, @ANYBLOB="00012dbd7000fcdbdf2510000000e7ff05002c000200080003000000000008000400400000000800010001000000080001002000000008000100010000004c00020008000200060000007e000400010000000800030005000000000635aeddee7a0cd80004000800000008000400000000000800030007010000080003003f0000000800040005000000280004000c00010073797a30000000000c00010073797a31000000000c00010073797a3000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000800}, 0x40c) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[]}, 0x1, 0x0, 0x0, 0x194}, 0x20008010) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r9) fcntl$lock(r9, 0x7, &(0x7f0000000380)={0x3, 0x1, 0x40000, 0xde63}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r10 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x0) ftruncate(r10, 0x4000b) sendfile(r0, r10, 0x0, 0x7fff0) 20:49:43 executing program 5: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x3, 0x12080) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r4, &(0x7f00000001c0)="a6", 0x1) keyctl$update(0x2, r4, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendfile(r1, r5, &(0x7f00000001c0), 0x8000fffffffe) io_setup(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(r1, r5, 0x0, 0xa5cc554) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x6, 0x0, 0x9a54709542ddbaa7}, 0x4) 20:49:43 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x5, 0x1) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8}}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffff60b, 0x2, 0x3, 0x9, 0xd46, 0x2, 0x10000}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) epoll_create(0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x40000, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799df222ffffffffffff30033776efd146373f2aaf296fc06065478d80f4175e3451fdaf29bc6763727a154c6ff8dabad01b9c9aa773ae810086d7839a5956537934dc76551921d0a46dcd996ca1406ad49d7f3d3066e90c4c696ecba3b38c45e3fc6fc1c754648275fd0d0ad080b28efc"], 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x4ba, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) inotify_init() socket$unix(0x1, 0x1, 0x0) clone(0x45088900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) [ 639.597294] audit: type=1400 audit(1575146983.409:1653): avc: denied { create } for pid=18003 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 639.623438] audit: type=1400 audit(1575146983.409:1654): avc: denied { create } for pid=18005 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 [ 639.693349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.699916] IPv6: NLM_F_CREATE should be set when creating new route [ 639.706451] IPv6: NLM_F_CREATE should be set when creating new route [ 639.835555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.842130] IPv6: NLM_F_CREATE should be set when creating new route [ 640.273261] audit: type=1400 audit(1575146984.089:1655): avc: denied { create } for pid=18005 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 20:49:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18000, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r2) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0x12f}]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x900de391ff8b7d55}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200930002000000000000000010000105000600200000000a00000000000000000500e50000070000001b0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000f4ff070000000000000000001700000000000000dfffffff000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 20:49:44 executing program 5: fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffd) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) write$selinux_user(r0, &(0x7f0000000000)={'system_u:object_r:audit_spool_t:s0', 0x20, 'sysadm_u\x00'}, 0x2c) pipe2(0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) open(0x0, 0x20141042, 0x0) 20:49:44 executing program 2: open(0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x2000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, 0x0) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f00000001c0), 0x8000fffffffe) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000500)) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000400)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, &(0x7f00000017c0), 0x333, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r8, &(0x7f00000017c0), 0x333, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r9) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r10, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r9, 0x0, 0x12f}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r14 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r13, r14, 0x0, 0x400000000088001) r15 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/enforce\x00', 0x380, 0x0) r16 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000019c0)='/proc/self/attr/current\x00', 0x2, 0x0) r17 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r17, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r18 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r17, r18, 0x0, 0x400000000088001) r19 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r19, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r20 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r19, r20, 0x0, 0x400000000088001) r21 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r21, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r22 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r21, r22, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r23 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r23, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r24 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r23, r24, 0x0, 0x400000000088001) r25 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r25, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r26 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r25, r26, 0x0, 0x400000000088001) io_submit(r10, 0x8, &(0x7f0000002dc0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r12, &(0x7f0000000780)="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", 0x1000, 0x6, 0x0, 0x0, r14}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x20, r0, &(0x7f0000001780)="a4e90c1410da8042382ec0e6d6e949b17c78721db957900c2bc631c69c08a3c08b5800a822bed36b78af26f43770d099ffa32eed14e79c2db7ee97562ea8c0953bbc4b198450978d7b8d0a653f669e7808d11688208748b28be4da6542aaed4a5e04ac88764fca81e02df6d4c32ac49f8884d4fb9ba0a9347c37e2f26003f49bfecd349f5e21632c6ddd31e82cfabf6c93565ed42280cad535739b00ee9f64c2d0a23184b323eac4ead1763af3858200ca4f2c2909dbe806f218e11074c6c2b44f", 0xc1, 0x3}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0xffff, r7, &(0x7f0000001880)="8f583156804431e94106ecaec6d8fe1745b4618f46ee4439e74bac63c9baa785e91fad34c8a0bb05f83e094b14520c496070d548389e3b5b723b06d9e3415d2311f7a1950dbe56641e170ee0710aacb5b04aa613fc6457ce8b03020624da9a862429d25a03c63979ef0ef9d90e763a1741499d65bbea7b9898afdd37e7dc542acf9c4a5f84282da7469db24656b8573ab141a2c1cb4888e3a332c934f45ca8560feedb882ac84f88c77ac04d37c0d9a315c75ceef668176588cf001b38bd79a5d64070da5c5c1d47e3ef2425e7bf0bc70d41b538fa22f961ce32a6714dd0bf6da7f84f7bc0dd6d60e86c36c0c7ea578f34f0b1f1ae31465997", 0xf9, 0xb, 0x0, 0x2, r15}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x2, 0xd, r16, &(0x7f0000001a00)="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", 0x1000, 0x7, 0x0, 0x1, r26}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x347c6ab2ae0146ef, 0xa94, r19, &(0x7f0000002a40)="131441e44e6a88f8e8ad0ad6d35fb6e84db2ef3c35f28c747ad69ee490395b34869125870beaef58d983e48d32d22dce8e5230109d58571623160e50b54cb8b651518305d1a56a87d655abb99e5ca2120a2a5a2c8dee35ca6226a1f54292c5dc1d4f640fd9a9ba764af9898d1236e2da17eb2dbd1fe74f1e9183bfe0e57803d456bcebfe218ed80aa7b9ce11fff417a240fb51244caef26da86b48c8a1b7bea7b08d4c1820d91421f82cb7893d8b5d329c1b", 0xb2, 0x200, 0x0, 0x4, r2}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0xb, 0x6, r11, &(0x7f0000002b40)="fb1c064f044a4ed0f3434d0234ee98eb181f3823263c1f7efe72e9dd19e34a3e464445783ceabb758c91173e00231f77ba7c9fdccee1689f915f61ff8023ee16a6c3c85c879d854db721e3161823121848befae37e6f726426eafb01839833a7e27aaa4eea2bed00085f4a123654bae35259237514faa842e1584917d3720260068356c95a857c4cb05ceb94a17cd1e9aede266798a41b6511ea0912dab7c719790991507ff40ab60a345ba74557cc970d619b7d1455cfe0a9e7cbed6e79965f9621481d9f02975acd88", 0xca, 0xb2f, 0x0, 0x1, r22}, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000002c80)="402bc59a7782dbfdac227f78825d402c3334fc07e92d9ef06b0523928f8e760a837b67265030823977f8d3146960d1c6e244b502", 0x34, 0x8, 0x0, 0x0, r24}, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x5, r13, &(0x7f0000002d00)="41c6060bc000c1a73fe549a30e7e4e164380b587b77f572a489d6afebe61cae18be7a1d44dbee6c8f158e5db271c5c26c26f36eb76af2812922cb844ae7da87e576a304d43d6b1a9507e370f", 0x4c, 0x5, 0x0, 0x1}]) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x218302, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r2, r5, 0x0, 0xa5cc554) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x800, 0x4dff8868581ae3ea}, 0xffffffffffffff95) 20:49:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)='./file1\x00') r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r4, 0x0, 0x400000000088001) write$9p(r4, &(0x7f00000000c0)="9e205d5356d9769aceaaf21caf658b0b0636af07de3f48d84fd6e95a41e4c131503db2d2bdf91a09006b185ec6885557646c0b2a584dadff73eb0d0c", 0x3c) quotactl(0x2080000201, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000000)) 20:49:44 executing program 5: r0 = memfd_create(&(0x7f0000000240)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0xfffffffffffffffd, 0x0, 0x1000) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000040)) 20:49:45 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x23}, 0x9}, 0x1c) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0xff}, 0x800002}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r6, 0x0, 0x400000000088001) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000140)={0x21, @multicast2, 0x4e20, 0x4, 'none\x00', 0x24, 0x2, 0x4f}, 0x2c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000000200)=0xfffffffb) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 20:49:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = dup3(r2, r3, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x45}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc30}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd0}}, 0x40000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r10, 0x2007fff) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) 20:49:45 executing program 5: unshare(0x20000) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe8b) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) [ 642.024695] audit: type=1400 audit(1575146985.839:1656): avc: denied { create } for pid=18059 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:46 executing program 1: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x488d02) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, 0x0) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f00000001c0), 0x8000fffffffe) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) io_setup(0xb0, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000001cc0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000300)=""/65) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/status\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r8, 0x4c03, &(0x7f00000005c0)) open(&(0x7f0000000080)='./bus\x00', 0x238302, 0x80) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/relabel\x00', 0x2, 0x0) sendfile(r10, r11, 0x0, 0xa5cc554) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000140), 0x4) 20:49:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30}, 0xb0b8) lseek(r1, 0x0, 0x4) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x401, 0x2, 0x45eedfe2, 0x2, 0x3ff, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) fcntl$dupfd(r6, 0x0, r7) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30}, 0xb0b8) 20:49:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) fcntl$setsig(r1, 0xa, 0x3a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = dup(r2) write$P9_RREMOVE(r3, &(0x7f0000000200)={0x7}, 0x7) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r4, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r6, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0x1f, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr, 0xfffffffe}, 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r5, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) r10 = socket(0x1, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000040), &(0x7f00000001c0)=0x14) sendmmsg(r9, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 642.677144] audit: type=1400 audit(1575146986.489:1657): avc: denied { create } for pid=18059 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00\x80\n\x0f\xa0\'\x87\x9e\xee\xde.$^\x19\x15\xb8.\x19\x1c\xae\xf6\xbf\x9c\xda~\xf7\xb4lE\x82j\x00\x88\xfb_\xab\xf8\x9c\x1f\xc59\xd4\xb5\xd9\x19', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x8) fchdir(r0) 20:49:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat6\x00') rt_sigaction(0x3, &(0x7f0000000100)={&(0x7f0000000040)="26fe03f30f1efef20f120b66400f38288965566666c4e17de116f047081d0b000000660fc6560000c403f90e2afedc4b00f3662681720f0d00", {0x80000001}, 0x40000006, &(0x7f00000000c0)="8fc868cca9e32200006547d1d1f30f1ed08fe840ed64a8ffebc4610611c7d9ee64660f60874e54fd0567f20fd0f9c46159fe81ab000000c443d17c1f38"}, &(0x7f00000001c0)={&(0x7f0000000140)="c4c125f21b460f1a2d000000816443095c9dcc8fa9b09690710000008fc97812c5db4ca303c4a1795a36480fae206766f30f1bd8f3400f01e8", {}, 0x0, &(0x7f0000000180)="400feeae00000000f98f6870ccede666d8300fbbbaffefffff3ef3908f49c09bf7f040811b18920000c4c14d6082fb7f0000c46219dcdd"}, 0x8, &(0x7f0000000200)) pread64(r0, 0x0, 0x0, 0x690) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) clone(0x90000000, &(0x7f0000000240)="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", &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)="57c13f216e7972e22c12aaa008bf0d9d0df9ecdc3a05cecde8628a018ced7846043614a2e662cb7067ae01f4c2cbb00368eb55344056b8e599f6721df9700d2484a219f98f790428494919571d") 20:49:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000440)=0x7, 0x1009d) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$KDMKTONE(r2, 0x4b30, 0x21d) 20:49:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = dup(r3) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7}, 0x7) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r5, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(r6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0e8e0049582bc6", @ANYRES16, @ANYBLOB="000129bd7000ffdbdf2502000000080001004e23000014000700fe8000000000800100000000000000bb0400050008000800e000000114000900fe880000000000000000000000000001", @ANYRES32, @ANYBLOB="080003002f00000000fe800000aa1400070066e329c7949daacfcde122b5862fe9b000000000000000000000006273a4a3bdea40f5777f6d80d69d552026b1a2949b1b0817d3d818c2d553bdedb0c72f7e96af32aa1aa5bfb8e9899c04f47ca0702163a5abf1f090379db13084b83157f7e55b8ff4fd0dbf9071814b501bc4477476b6f2e3af82e6a72bdd9dcc85fb19919ccd75ef834d75fab252a7887547ee8a267fed62142b99e3d7340b1479a28b769ae291acb75c81da3776d35886338e88ea29dea41909ae1db83d18fe14724a39f64e5d"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 20:49:47 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000140), 0xfffffffffffffe91) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') creat(0x0, 0x0) munlockall() r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0xffffff7e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xd}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x220060, 0x2) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000080)=0x20005, 0xffffffffffffff88) socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) getpgid(0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_open_pts(r8, 0x400000000050d702) write(0xffffffffffffffff, &(0x7f0000000100)="00525ae8ceb77f0000003ac49ca888d77e6e1bb1b3dd27614d92745f5082431931dfa1a283c1e645c74ca06ce2b91ff84c54d7e3588355a6", 0x38) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(r10, 0x4000000000000002) r12 = dup3(r11, r9, 0x0) ioctl$TCXONC(r12, 0x540a, 0x0) ioctl$TCXONC(r12, 0x540a, 0x1) dup3(0xffffffffffffffff, r12, 0xecd9e68c82892d2b) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) signalfd(r6, &(0x7f0000000000)={0x8001}, 0x2b5) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r14, 0x40045431, &(0x7f00003b9fdc)) r15 = dup3(0xffffffffffffffff, r13, 0x0) ioctl$TCXONC(r15, 0x540a, 0x0) ioctl$TCXONC(r15, 0x540a, 0x1) 20:49:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) prctl$PR_SET_TSC(0x1a, 0x1) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_submit(r4, 0x2000000000000161, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000340)="42bd0d161a691f4c259fd594b0b37ad2340aebc2aa74fa277ce08b40dab73f835a1c0fba3a570d4ba4c37d3529c1d3b4ff6be4657e98499cba936f666d3389da30bdc2efa39f4edda05af73a9b4ec7320f9dd9fe5c6411718ee5dbeec22057702a6572345ef1fea65578eca069c1550bc446a9b1a77a73864bbdc1ad7073db3ec3fb2fcb2281b53bf915cab2ae0198bc283e387f41093311bd072bf6d382d085152bce60628ea868bfcfcafd683f2fc0c018031d6a6ff407eb6302af642b1cb68a06117002", 0xc5}]) fallocate(r2, 0x0, 0x10000, 0x7ffe) r10 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r12, 0x40046207, 0x0) write(r2, &(0x7f0000000240)="20ce8398f192d4a0835af508476bafa82ca17440b3c7433f74bdaad4f0d7b0cf9aba45ff620ce54a960626e0c5b812a87b75c5f8ac245af69584119e688470574d21903f7ea471ac1e89e60e15ebe609016728c26eea4abb51d8c739774ab97427d978fbd451a3347ee377fc582ff64b8b8dff535eda1af42ea9f55056f98f3f7e09368d41a54e258ff2e593efe4c78da5face3a83b3927d6baa79deed93ddc9beec5e13b186cb30969753d559931778caed8a7e0fc0fe496206ce5817bd12de57e4daea2e389f63c0cc5f7b8e346215eb22eace3275f026fc92c11861cd2a0b36f149218132b21c82f66711306ced79", 0xf0) sendfile(r1, r10, 0x0, 0x8400fffffffb) 20:49:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x1000046}, 0xffffffffffffffae) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 20:49:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x17ffb) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x80082102, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x55aa40be, 0x0) 20:49:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xc004af43f5091aa7, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4081) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800b000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x230, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcfb1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x88) r5 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="3c0af68bb1a0a73ac071672bb8f8705a3cfc24d86b25221809de9de076d7b60cbd8a6213208abd6553985d71b4350287aac9492abde8e1153c31d56fbed49bc2d374a96a1b47187c5e82c1cb6bc6c178a8a05c5db226d5505365862dd7019755089b9f55f60a22ca1d2a2a4ea0ea6045f052d86e11c2b9913a26829e4ab9497501bd6dbbe69c2ae61371da", 0x8b, r5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) ptrace$poke(0x5, r6, &(0x7f0000000700), 0x7) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000740)={0x81, 0x2, [0x0, 0x1, 0x7fff, 0x1, 0x7], 0x7}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x400, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000a00)=0x2, 0x4) r9 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VT_SETMODE(r9, 0x5602, &(0x7f0000000a40)={0x3f, 0x20, 0x7, 0x3f, 0xdc}) ioctl$KDSETMODE(r9, 0x4b3a, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000a80)={0x1, 'ipddp0\x00', {}, 0x1}) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vga_arbiter\x00', 0xef2a9be25e7d6801, 0x0) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000b40)={@broadcast, @local, @broadcast}, 0xc) r11 = dup2(r9, 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000d00)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @multicast1, @dev}, &(0x7f0000000e00)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e80)=0x14) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x98, r12, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r13}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r16 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000)='/dev/vga_arbiter\x00', 0x400101, 0x0) syz_open_pts(r16, 0x602000) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dev/zero\x00', 0x880000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r17, 0x0, 0x2d, &(0x7f0000001080)={0x4, {{0x2, 0x8, @remote}}}, 0x88) [ 643.974340] qtaguid: iface_stat: create(lo): no inet dev [ 643.981475] qtaguid: iface_stat: create6(lo): no inet dev [ 644.031659] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 644.085824] qtaguid: iface_stat: create6(lo): no inet dev 20:49:48 executing program 1: r0 = memfd_create(&(0x7f0000000140)='$B6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000001000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501bfbd9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d8b0a676ec576e6002ca2d3e432b9ce916a7036c13c8b8f57c632123c233beca448dd9f82c124c794f7"], 0xa8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 20:49:48 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x430701, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000300)={r1, 0x0, 0xfffffffffffffe73}, &(0x7f0000000440)=ANY=[], 0x0, 0x0) gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x5e9, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x1c, r10, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8001) r11 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000040)) r13 = epoll_create1(0x0) epoll_create1(0x0) r14 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r15, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000000)) 20:49:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063400921ad4d75017de6000000000000000000000000000000000000000000000000004e000000000000001800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a6273"], @ANYPTR64=&(0x7f0000000180)=ANY=[]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) 20:49:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = dup(r3) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7}, 0x7) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r5, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(r6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0e8e0049582bc6", @ANYRES16, @ANYBLOB="000129bd7000ffdbdf2502000000080001004e23000014000700fe8000000000800100000000000000bb0400050008000800e000000114000900fe880000000000000000000000000001", @ANYRES32, @ANYBLOB="080003002f00000000fe800000aa1400070066e329c7949daacfcde122b5862fe9b000000000000000000000006273a4a3bdea40f5777f6d80d69d552026b1a2949b1b0817d3d818c2d553bdedb0c72f7e96af32aa1aa5bfb8e9899c04f47ca0702163a5abf1f090379db13084b83157f7e55b8ff4fd0dbf9071814b501bc4477476b6f2e3af82e6a72bdd9dcc85fb19919ccd75ef834d75fab252a7887547ee8a267fed62142b99e3d7340b1479a28b769ae291acb75c81da3776d35886338e88ea29dea41909ae1db83d18fe14724a39f64e5d"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 644.407599] audit: type=1400 audit(1575146988.229:1658): avc: denied { create } for pid=18131 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 644.478257] audit: type=1400 audit(1575146988.299:1659): avc: denied { create } for pid=18131 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 644.523651] audit: type=1400 audit(1575146988.339:1660): avc: denied { create } for pid=18131 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 644.569704] audit: type=1400 audit(1575146988.389:1661): avc: denied { create } for pid=18131 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 644.645661] audit: type=1400 audit(1575146988.459:1662): avc: denied { create } for pid=18131 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x140, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@arp={@multicast1, @local, 0x2446d17139d18e85, 0xff, @mac=@remote, {[0xff, 0x101, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0x80]}, 0x0, 0x5, 0x9, 0xa3fa, 0x1000, 0xffff, 'ip6tnl0\x00', 'syz_tun\x00', {}, {0x1fe}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={[], 0x1d}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff, @empty, {[0xff, 0x80, 0x0, 0xff, 0xff, 0x7f]}, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x9, 0x800, 0x8000, 0x0, 0x7, 0xa0, 'veth1_to_bond\x00', 'bridge0\x00', {}, {}, 0x0, 0x200}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@arp={@remote, @multicast1, 0xff, 0x7fffffff, @empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0x1fe]}, @mac=@link_local, {[0x0, 0xaa8f8a6cad46ecd4, 0x0, 0xec2595574ca375a0, 0x101, 0xff]}, 0x16c, 0x9, 0x0, 0xffe0, 0x401, 0x7, 'hwsim0\x00', 'team0\x00', {}, {}, 0x0, 0x3}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @multicast2, @multicast1, 0x8}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001900f100020007000012020000080000e10c00f41ee400", 0x39}], 0x1) [ 644.857177] audit: type=1400 audit(1575146988.679:1663): avc: denied { create } for pid=18131 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 644.874547] audit: type=1400 audit(1575146988.679:1664): avc: denied { set_context_mgr } for pid=18142 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 644.874591] binder: 18142:18148 ioctl 40046207 0 returned -13 [ 644.893165] binder: 18142:18148 unknown command 155214592 [ 644.893175] binder: 18142:18148 ioctl c0306201 20000140 returned -22 [ 644.925051] audit: type=1400 audit(1575146988.739:1665): avc: denied { create } for pid=18131 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 644.950303] audit: type=1400 audit(1575146988.769:1666): avc: denied { create } for pid=18131 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x4) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) getpriority(0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) open(0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r9, r10, 0x0, 0x400000000088001) fcntl$getownex(r9, 0x10, &(0x7f0000000080)) listen(0xffffffffffffffff, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000000)={'lo\x00', 0x8000}) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) accept4(r11, 0x0, 0x0, 0x41000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='lapb0\x00', 0x10) pipe2(0x0, 0x0) r12 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r13 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r12, r13, 0x0, 0x400000000088001) openat$cgroup(r13, 0x0, 0x200002, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300), 0x4) ftruncate(r4, 0x80006) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x100000890b, &(0x7f0000000400)="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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x4000000004, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) dup3(r0, r1, 0x0) [ 645.138039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 20:49:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x5e24, @local}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000640)={0x1, 0x0, 0x1000, 0x16, &(0x7f0000000400)="6c87225dc91498aa11cb993443acb3eded8d482696c3", 0xf4, 0x0, &(0x7f0000000540)="0372a7811bf79b014c430837900fc6319a2174d83f0efde613111ce7a5e4ce41f0a177d10cec8d6bc6a88a7a78c04e939eb4800825b356759564d109bb598203946343e600bbf76c04e1b11ed157a949af93af2e2b5e6827ad302fcb90e07c5c6ac41ebad1afd95c4014ee1f9346844ac3e2952a14de45641d9ea9ca452db7a4a169b4f72718a323147f6dc7108b4923398f2c2b231f62908a72e15e046f8dccfd4d8dd73077991cced4c474c2fff9b6fef7e029434dd4cf29df30cbb1cafd03ec355f59a223d51463282b8134f68f89b6cd956d4b3f6d0d108ba271103f0d767c26b75a2c5e312d5d2c0b492e927e50cd0d44d6"}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f"}}, &(0x7f00000003c0)=0x0) timer_gettime(r6, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) socket$inet6(0xa, 0x800, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) [ 645.622256] qtaguid: iface_stat: create(lo): no inet dev [ 645.629034] qtaguid: iface_stat: create6(lo): no inet dev [ 645.646296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 645.763779] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 645.824500] qtaguid: iface_stat: create6(lo): no inet dev [ 645.887665] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.1'. 20:49:51 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0xfffffffffffffffe) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) setxattr(0x0, 0x0, &(0x7f0000000300)='u', 0x1, 0x6) pipe(0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x3, 0x1081082) r3 = memfd_create(&(0x7f00000000c0)='ppp1wlan1system\x00', 0x1) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000380)='\'', 0x1}], 0x1, 0x1081806) sendfile(r2, r2, 0x0, 0x2000005) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x1) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000100)=0x0) write$cgroup_pid(r1, &(0x7f0000000140)=r8, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r9) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r10, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r9, 0x0, 0x12f}]) fchdir(r9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x44}, {0x6}]}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x80c, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 20:49:51 executing program 0: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RRENAME(r4, &(0x7f0000000900)={0x7}, 0x7) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000080)=0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b08160df7db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x40002f0, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r8 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="0210040007000000002000000000000008001200000000000000000006000000e7ffe8000000000000000000000000000000000000000000cd006ef795a63b19298b6e28198740e6fe7a33ab3c119d5059d8bf7de10b38ab04ceee0f528a22e0ead8edf3fa7a0926e9dc47b62d379d04cadc8f7ce4acc476e53dd7f4395d3a2db614b959e93fdc27afdeb76141e95296ca7211c6d9133273474fbc379d8340b2cd2057c273d4b235c885f0015c7faf3dfb14ee1591e377523afcb638deeddfa90d690592e742ba381e08148e991636866c6e16e4677e205200000000000000000a6ca5cfb983688989f18cb5360df5c6021cf3bc6ea569246bd9f754ff1e381dcf8c84b0b4f3fa1b95348753e629a6dd4d455cc366feb3b91e2f9ce3661c1f142ca0293cec14e7b9ecae31533df308f179969c27ff1b5f704a2019349fae8ae89048100fa2113e459407d5912f00000000000000000000000000000076700d538c6c6d0809e2851722095388c8bf829e6125c6b28d73abff4c608abde625ffffff7f1baa1ef8da4db0063b3f39dc8befe21cdaf8be038f2cf8a7111152f78e1d7593abc2e46f8d3fe805ac5b752c9aed653549851c126db97ec5b4e62f20ecf4db9a6e616c6efed1192d062bcdb242e93dba1ec2f717109d8f0e5a3af2c57260e15554e0f93bf828262d051dfae08600070f0b78a3939ec44bd7b4285ecd7041981ea90c207ac05ef93dec0dbd99611794bc26812b831eb28e7b69bc67573b32ccf52b6776887669bd4420ec107ef56631d7c965bcaeaff28f86771fd6211e99f3adfbb58b9872f9f07913c3a34dc681c51bf88fce2bd5f79b0f78978610d08f3c1acde9f960847a27d39c582407e93e636d0976ee904184ba39b850924fde00b374b362bc047d25ab068703a4e8fe1807aaea4e4a4ccbc4bad65d5f91e6c398d88ff17dc67c7ff6bd6d776b7adec35fcd4fa6ddff57869d32f92e97f47da9c89e8cecd0ee00005027dff9b5ae35df81f632969f40309077a3eb2ab2c520df2f3845e3323342839e4f22d03bfa5f8afbfd2795335403592c61e13f7fb17bf67292d18013807d9db7993aa2691baf2a2f4effdcf093380fdfec203b10f3bbd267035dad4e92ba831ccf87270ec5083b400f093601ec6f0cae8e25df93af448818ee381c9d2eb0b53d61355b35778edd9181c336e2085580f58e438fa8b1f05b7079007c1b8dd1d612f893f7798131941ce0fb30df20e56dfe84646a2b7b0cef154f6393eb7a020b40eea4462d094de2a26914e8c34ff34894d14e36a464fa5ebcb9f552bd484d917e244196c64a6bd52ab4c5a030f74ed8d37bc6fa54e4a0135b987c3d30ea06fc8858d1dce594c9bde06360d741ac4da14dc4a74df6f0ca502d9e00ba790d0a31de20562d8700305154e55cd05e4644d413d462cf327c3b22f765de97a6d24b1911fb2111309acabe64b0c42ee8aaa11a311a1c19ef5389cd00f353a17d23605ca20d33b10b53f2832d18c6e072d92fa3b2923595882bce541a7c0ff588517438eb04cfc75c056dec9481307b6220716bb76b48dd7ceca8f21cfae3b52cd60c5b451fc0c0f58d5f05b010eef5063e921d5839f3715322e1f84edc48113024985625e1c141c3a8e1dd75789b6583a81e7ac49ad4755d93741918aa0920811b0582b4e121efc89138b20a18ffe576b84ffd3dcfa99a653facf5223f74686ecb818ab95eb0fac0c9f576250be7587a4050eb6b6ff5c312fd6b974e066afd471ba12b8c491d332641d46f360108fe1d941f5eab1c61ae59500f286b6ed982fcdafda77d4cbe47b725275a1989f564d91180725bca7db01252909f272cefaab623651686f26e497bdea38ca3ac08be35b9c234abf2e3a60b1772ea9168256e6cf336129d520d6091c9616544162c7ef89e14930b48fd3a644defdd357952025133a050633ca794aedff6e1e67fdb0383141f7613974c68b78a59597c083f6b9190f0468c59bbbebb2e7f88cf974d6fbf2abf0d36c74c7cb9760fd8a1fb1064637b612192d3d2cd7b8040f8130580d67b111f273189e046a9ed5fbca2fb7fffc30351c7b46239"], 0x437}}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x42, @loopback}, 0xffffffffffffffd1) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r10, r10, &(0x7f00000002c0)=0x202, 0xdd) 20:49:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) io_cancel(0x0, 0x0, 0x0) dup(0xffffffffffffffff) socketpair(0xd, 0x2, 0x5c, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7ffff, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff83, 0xa, 0x0, 0x0, 0x0, 0x8906}}}}}, &(0x7f0000000040)) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) epoll_create(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x44) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = dup(r6) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x408102, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 20:49:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = dup(r3) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7}, 0x7) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r5, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(r6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0e8e0049582bc6", @ANYRES16, @ANYBLOB="000129bd7000ffdbdf2502000000080001004e23000014000700fe8000000000800100000000000000bb0400050008000800e000000114000900fe880000000000000000000000000001", @ANYRES32, @ANYBLOB="080003002f00000000fe800000aa1400070066e329c7949daacfcde122b5862fe9b000000000000000000000006273a4a3bdea40f5777f6d80d69d552026b1a2949b1b0817d3d818c2d553bdedb0c72f7e96af32aa1aa5bfb8e9899c04f47ca0702163a5abf1f090379db13084b83157f7e55b8ff4fd0dbf9071814b501bc4477476b6f2e3af82e6a72bdd9dcc85fb19919ccd75ef834d75fab252a7887547ee8a267fed62142b99e3d7340b1479a28b769ae291acb75c81da3776d35886338e88ea29dea41909ae1db83d18fe14724a39f64e5d"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 20:49:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = dup3(r1, r2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r5, 0x0}]) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r7, r8, 0x0, 0x400000000088001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r9) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r10, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r9, 0x0, 0x12f}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r14 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r13, r14, 0x0, 0x400000000088001) io_submit(r3, 0x7, &(0x7f00000008c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000140)="a75c37eb0993dd9e508ade3f15e232c5108fe5f8b194bfab345ddc45d8f4f48b5cf4614767db3837bd22f234b50bb4867306491132594bf56c96bc16ac", 0x3d, 0x1, 0x0, 0x0, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, r4, &(0x7f0000000300)="afeeef1edeb5936e0c6bafb9e531d87ed0271c5e251a2f58bb669a11ab7db9ea100b9d72ae6736e840beaedeee13df48c5a78e01de4e5494606a3561f8f44c5bf20557ecc3dff262706e2d85777172520abdc62cf87bc4262ec9e7083615f821142d861e5e1751051380414c716478151ea18189b085b42a9137bc", 0x7b, 0x254000000000000}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x8001, r2, &(0x7f00000003c0)="dfeaabd7b1df14dae4", 0x9, 0x7, 0x0, 0x2, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0xffff, r9, &(0x7f0000000440)="b329a99c295379d1cfbb4c400a580fd650b5461c5875003a955bf04f8e07394021ebc8895af5e6c87b8d2cb75c6f521755779b9640b57519642bb25d973934e9257fafaa517f5bca83e0fc8fe1bed930d2c85afd4f5434", 0x57, 0x9, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r12, &(0x7f0000000580)="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", 0xfb, 0x1, 0x0, 0x1, r4}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x5a, r4, &(0x7f0000000680)="0bcf6a0b848090130886531b6755401dd2f3d72e260d49fe5be799154fca0e1d337758c895298859538a55d284386807d0ec6407ccd8d0e5e47aa2e5ad21fb0d287ba580a745e4bfeaadd3cccd2819872d154446b61913d250b813a0b465a24652287ddba6a6f71eb61dd70750c22cb216a7763af961b0f1876556c14a248e234f60ae", 0x83, 0x0, 0x0, 0x4, r14}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000780)="6d8dc85c4fcd0e0f7aab9268d179a952c26f8a4be05e90b99323912e3a3f57653f0ca60d704bff65a0e0dbfae0f060267573420bd5999e76177adb23d220c0ce9aeb8a14e0b21fccffba78637fe40d08fd261ef7943503383c38eda6915becbb39c0b3440a147285ca8e0b3d3c80209aaf11628515e73e1fc98368c92b2e65e5bffeca4db1f6088fe284906841fd75ec6fa606c4baf522601176aa49b0c93b8d72594a31811b64f4b2e3b965c46b7ab13152b10e9dd69cf53461d4955a52f8402bc130550b8ee1f3f32e5339dbfa8ad91554d18455f8ebdde8", 0xd9, 0x100, 0x0, 0x3, r0}]) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 20:49:51 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x103, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x9, 0x8001, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000ebff0100010001000000000000edfffd000005"], 0x49}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f0000000240)) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r4) fchown(r2, r3, r4) 20:49:51 executing program 3: openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) r0 = gettid() clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x3, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ptrace$cont(0x9, r1, 0x0, 0x0) 20:49:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x20000) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r6, 0x4, 0x40400) write$FUSE_WRITE(r6, &(0x7f0000000080)={0x18}, 0x18) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x20) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x800, 0x0) write$eventfd(r9, &(0x7f00000001c0)=0x4f04, 0x8) r10 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x4) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) [ 648.115947] qtaguid: iface_stat: create(lo): no inet dev [ 648.127076] qtaguid: iface_stat: create6(lo): no inet dev [ 648.185779] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 20:49:52 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) exit(0x0) r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r2, &(0x7f0000002000)='/', 0x1) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r4, 0xa, 0x12) recvmmsg(r5, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x16) ptrace$poke(0xffffffffffffffff, r3, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000000000)='./file0\x00') [ 648.231498] qtaguid: iface_stat: create6(lo): no inet dev 20:49:52 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x409c59) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/netlink\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000003c0)={0x0, 0x70, 0x2, 0x8f, 0x15, 0xef, 0x0, 0x8a, 0x3014, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff9697, 0x5}, 0x40, 0x0, 0x80, 0x2, 0x6, 0x1, 0xf39c}) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf250500000008000400140300000c00020008000500020000000800040001000000080004000600000008000600ffffffff08000501080000001800020014000100ffffffff0000000000000000000000001c0002000800030004000000080006000300000008000e004e2000006f45941c972521fe6237fca2a3ee13a26f5e500e45fdc039acbf10e041b7a3b691e84076e79f38c8a909b6d8f69aa63b427c02fb880bfad43492ac516b8cfa8965a5de59288e6466a67ede869d91db5a90"], 0x7c}}, 0x4a0) clone(0x100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x12010, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x400000000001f) creat(&(0x7f0000000180)='./file0\x00', 0x0) 20:49:52 executing program 3: open(0x0, 0x4400, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) clone(0x1044000, &(0x7f0000000540)="3282bbb2114456ee762b19924aea77a507ca97750d302e519fc7d2c197eb13fea383e44d6f72a8d8cd71178996061374e9816734362727a676898473243e9c198294376cec426dbc089c41a5bc089be671a8c4645aba147e86baedb94c4fd588edd4bdc3cd98c22caeb1b6e54e5ac0a65f339b", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000640)="a22dfa9a8f63cadece6e087e6a5c39f7b383661cac932448d332ccaff8ce3fc5d8b6b1b21df5e08ad3476b9aeae334bd41454e78015a4a17a671f0d435e5a0d81aeb8f765274a2433bd69a13fb59bd6e45b9e061202d3c1a8c50d6055fa187f8fe6bc98d3a444bea6eb99889e5eb6b656794f433c4a485d80c16507bb0") fchdir(r0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$random(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(r4, &(0x7f0000000140)='./file0\x00', 0x400001, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f00000001c0)=0x2000000000000074, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="040100b92b32acfe0ad673"], 0x14) sendto$inet(r7, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x9, 0x0, 0x27) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000380)={0x2d, 0xf, 0xd, 0x17, 0x0, 0x3, 0x4, 0x0, 0x3e3f114928beb431}) writev(0xffffffffffffffff, &(0x7f0000000680), 0x1c9) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0x6, 0x4) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x0) 20:49:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = dup(r3) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7}, 0x7) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r5, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(r6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0e8e0049582bc6", @ANYRES16, @ANYBLOB="000129bd7000ffdbdf2502000000080001004e23000014000700fe8000000000800100000000000000bb0400050008000800e000000114000900fe880000000000000000000000000001", @ANYRES32, @ANYBLOB="080003002f00000000fe800000aa1400070066e329c7949daacfcde122b5862fe9b000000000000000000000006273a4a3bdea40f5777f6d80d69d552026b1a2949b1b0817d3d818c2d553bdedb0c72f7e96af32aa1aa5bfb8e9899c04f47ca0702163a5abf1f090379db13084b83157f7e55b8ff4fd0dbf9071814b501bc4477476b6f2e3af82e6a72bdd9dcc85fb19919ccd75ef834d75fab252a7887547ee8a267fed62142b99e3d7340b1479a28b769ae291acb75c81da3776d35886338e88ea29dea41909ae1db83d18fe14724a39f64e5d"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 20:49:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) write(r3, &(0x7f0000000180)="150ffb30f3210a3b44b2d26a266d1c70f6816e29d007003a67a6c374f0ed6342464f2ae6fda7730aeef46158855a203292e46714890d2472b82d24f7e0d65c75d16015255affa1b1fa37ca5755396247927a8c08d36b63d9953bf6dc80f35602240767451c66f9c65df438c5742bae7c37290925d285a9cd3a1815594973b94f", 0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x14bfa000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:49:52 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000080000000aab40003003ee96f0000ea776686d270ae38"], 0x188) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) 20:49:52 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x410000000001, 0x0) pipe2(0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0x800) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$smack_xattr_label(r2, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)={'^posix_acl_access'}, 0x12, 0x2) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x100) ftruncate(r3, 0x10199b4) sendfile(r0, r3, 0x0, 0x8000fffffffe) [ 649.025738] binder: 18248:18256 ioctl 40305828 0 returned -22 [ 649.069063] binder: 18248:18262 ioctl c0306201 20000000 returned -14 20:49:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RSTAT(r4, &(0x7f0000000300)={0x6a, 0x7d, 0x2, {0x0, 0x63, 0x101, 0x28, {0x32, 0x0, 0x3}, 0x1010000, 0x3c64, 0x3, 0x0, 0x4, 'ppp0', 0x8, 'eth0/GPL', 0xd, '/selinux/mls\x00', 0x17, 'wlan0\\4([wlan1\'system{:'}}, 0x6a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) r5 = eventfd2(0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) fstat(r5, &(0x7f0000000680)) getpid() getgid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000000140)=0x2a9) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(0xffffffffffffffff) r9 = open(&(0x7f00000008c0)='./file0\x00', 0x80, 0xb64da5c8027e3cbe) ftruncate(r9, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8}) 20:49:53 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc00c28af09239543, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x300600}, 0xfffffce5, &(0x7f0000000600)={&(0x7f0000001e80)=ANY=[], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000000380)) write(r1, &(0x7f00000001c0), 0xfffffef3) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83) r2 = epoll_create(0x5) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x200f}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x28) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fchmodat(r6, &(0x7f0000000400)='./file0\x00', 0x184) sendto$inet6(r5, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) socketpair(0x0, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180)) faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600) 20:49:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x90E\x00', 0x2}) preadv(r0, &(0x7f0000003280)=[{&(0x7f0000003300)=""/4097, 0x1001}], 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000900)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') pipe(0x0) close(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 650.082479] qtaguid: iface_stat: create(lo): no inet dev [ 650.089012] qtaguid: iface_stat: create6(lo): no inet dev [ 650.155456] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 650.200132] qtaguid: iface_stat: create6(lo): no inet dev [ 650.206498] audit_printk_skb: 24 callbacks suppressed [ 650.235210] audit: type=1400 audit(1575146994.019:1675): avc: denied { create } for pid=18297 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x1ff, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fsync(r4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xab53b20a69165e88, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) r5 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r7, 0x0, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r9, 0x1, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xe, 0x6211, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x66, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r10 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGBITSW(r10, 0x80404525, 0x0) ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f0000000080)={0x52, 0x5, 0x6, {0x7, 0xf4b}, {0x5, 0x5}, @rumble={0x0, 0x7}}) 20:49:54 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'\x00\x00\x04\x00', 0x4fff}) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xfffffffffffffd73) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x0, 0x7, 0x8001}, &(0x7f0000000140)={0x0, 0x7, 0x7b, 0xffff, 0xfffffffffffffff8, 0x35b0, 0x303}, &(0x7f0000000180)={0x0, 0x2af0, 0x0, 0x1, 0x0, 0x800000000000001, 0x2, 0x3ff}, &(0x7f0000000380)={r10, r11+10000000}, &(0x7f0000000440)={0x0}) nanosleep(&(0x7f0000000100)={0x0, r9+10000000}, 0x0) tkill(r0, 0x15) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={0xf029}, 0x8, 0x100800) ioctl$FS_IOC_GETFLAGS(r12, 0x80086601, &(0x7f00000003c0)) [ 651.082485] audit: type=1400 audit(1575146994.899:1676): avc: denied { create } for pid=18297 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 651.197161] audit: type=1400 audit(1575146995.019:1677): avc: denied { create } for pid=18310 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 651.348102] audit: type=1400 audit(1575146995.169:1678): avc: denied { create } for pid=18310 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 651.408181] audit: type=1400 audit(1575146995.229:1679): avc: denied { create } for pid=18310 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 651.752574] audit: type=1400 audit(1575146995.569:1680): avc: denied { create } for pid=18310 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 651.781250] audit: type=1400 audit(1575146995.599:1681): avc: denied { create } for pid=18310 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 651.808757] audit: type=1400 audit(1575146995.629:1682): avc: denied { create } for pid=18310 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x4, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x78) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x880a, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, [], 0x19}}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x406, 0x4a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xfc64) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="2059ae6e6dbba3a79ffe", 0xfffffffffffffe56, 0x0, 0x0, 0x0) 20:49:56 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = dup2(0xffffffffffffffff, r1) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x6db6e559) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FP_MODE(0x2d, 0x0) getpriority(0x1, 0x0) 20:49:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@dev}, {@in6=@loopback, 0x0, 0x3c}, @in=@empty, {}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-generic\x00'}, 0xfffffffffffffeca}}]}, 0x138}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000001580)=""/156, &(0x7f0000000140)=0x9c) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) uname(&(0x7f0000000580)=""/4096) r5 = syz_open_procfs(r4, &(0x7f0000000380)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JPI\xea\xcc\x8a\x0e\xac\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r5, 0x0, 0x400000000088001) accept4$unix(r5, &(0x7f0000000500), &(0x7f00000004c0)=0x6e, 0x80000) 20:49:56 executing program 4: eventfd2(0xffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x4ba79387e1682efa, 0x4) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000003c0)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r7 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet(0x10, 0x80003, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f000000ed80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r9 = dup(r7) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r10 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r10) add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r9, r11, 0x0, 0x8000fffffffe) 20:49:56 executing program 3: unshare(0x20600) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fremovexattr(0xffffffffffffffff, &(0x7f0000000200)=@known='trusted.overlay.impure\x00') r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r4, &(0x7f00000002c0)=""/168, 0xa8, 0x40010141, &(0x7f0000000380)={0xa, 0x4e23, 0x7, @mcast2, 0x4b}, 0x1c) pipe2(&(0x7f00000000c0), 0x80000) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x94, 0x4e, 0x9, 0x51, 0x0, 0x5, 0x80480, 0xc5df7e3113f0613d, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x4, 0x2}, 0x2001, 0x20, 0xa0, 0x2, 0xffffffffffffffff, 0x401, 0x8000}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) lseek(r5, 0x9, 0x3) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/member\x00', 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffeda, 0x1) sendmmsg$inet6(r1, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)={0xa, 0x4e20, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 20:49:56 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x8) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x20000, 0x0) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f0000000080)="08000000000000001c158d", 0xb) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070100009200000e0000000000000000000000000001000008000000000000000529"], 0x22) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:56 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0xb, &(0x7f00000000c0)={0x0, 0x1c9c380}) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffff8, 0x80200) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x1f, 0x2, 0x1, 0x80, 0x1, 0x3, 0x81, 0x7f}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='cmdline\x00') r0 = open(&(0x7f0000000380)='./file0\x00', 0x2, 0x64584c641ac32d9c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x0, 0x9, 0x0, "fc40924e05e7de36098f4c22402b74660066cd2ddd988d06c9adda971205335ac946060057f46f7de0029a168c53410d421ca3b6fd854aa09de409f78838bb80a5ab5562b0d35c6ac762ddfc0127148b"}, 0xd8) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0xe322f04) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000000)=0x2ece, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x1004080, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="79cdd115caf00f8a59a3e9982555c4b7ac18c340e42d45ec4b781097785831a968e48150414a609ada9a7d11bf8fb59e67fb6887bdbe89"], &(0x7f00000001c0)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='.', 0x0, 0x15112, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) 20:49:56 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) fcntl$setsig(r0, 0xa, 0x3a) dup(0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x10}, 0xffffff9a) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x5e1401, 0x0) r5 = socket(0x0, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000000)=r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000240)={@remote, 0x56, r7}) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r2, &(0x7f0000000380), 0xfffffffe) accept(r2, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000180)=0x80) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 20:49:57 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x280100, 0x12) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80800, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xece7) ioctl$RTC_VL_CLR(r0, 0x7014) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2000, 0x100) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x4, 0x8, 0x1, r3}) ioctl$KDSKBLED(r3, 0x4b65, 0x53) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="22c723d7f92c3e92e9f621bc90294c6109c8035fa011385b9af91abc028a54892a5f9644666054e5aa35cb127db4872dc133b7d426e2cb590d379956d21df7c07d0120babd763a9ceae1f8ae4d2042bf882ea5d166354cb9", 0x58, 0xfffffffffffffffc) r5 = request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='*\x00', 0xfffffffffffffffe) keyctl$reject(0x13, r4, 0x6, 0x7, r5) sendmsg$nl_netfilter(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40042}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0xc, 0x7, 0x20, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0xa}, [@generic="700e74ef08d4ba"]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f0000000500)={0x10000, 0x7}) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000580)) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='pids.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000640)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @rand_addr=0x4}, {0x2, 0x4e23, @empty}, 0x20, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)='bridge_slave_1\x00', 0x0, 0x400, 0x2}) r9 = memfd_create(&(0x7f0000001940)='e\x00', 0x6) write(r9, &(0x7f0000001980)="4c353cb8780fa77688db6c5d1119cf996f9a7dafacf12bcdd9fe865dc898", 0x1e) prctl$PR_SET_NAME(0xf, &(0x7f00000019c0)='securitykeyring\x00') r10 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001a40)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000001b40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001b80)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001c80)=0xe8) getresgid(&(0x7f0000001cc0), &(0x7f0000001d00)=0x0, &(0x7f0000001d40)) stat(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001e40)={0x0, 0x0, 0x0}, &(0x7f0000001e80)=0xc) r16 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) r18 = getegid() getgroups(0x1, &(0x7f0000001f40)=[0xee01]) fsetxattr$system_posix_acl(r6, &(0x7f0000001a00)='system.posix_acl_default\x00', &(0x7f0000001f80)={{}, {0x1, 0x1}, [{0x2, 0x1, r10}, {0x2, 0x1, r11}, {0x2, 0x7, r12}], {0x4, 0x5}, [{0x8, 0x6, r13}, {0x8, 0xb31845ec80524455, 0xffffffffffffffff}, {0x8, 0x8, r14}, {0x8, 0x0, r15}, {0x8, 0x4, r16}, {0x8, 0x2, r17}, {0x8, 0x1, r18}, {0x8, 0x1b0cbc781d72f3db, r19}], {0x10, 0x2}, {0x20, 0x1}}, 0x7c, 0x2) [ 653.517216] audit: type=1400 audit(1575146997.339:1683): avc: denied { create } for pid=18350 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:57 executing program 5: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x4ffe1, 0x4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x382, 0x4) ftruncate(r9, 0x2007fff) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x24) ftruncate(r10, 0x2081fd) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) sendfile(r1, r9, 0x0, 0x8000fffffffe) [ 653.714736] audit: type=1400 audit(1575146997.529:1684): avc: denied { create } for pid=18366 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:49:57 executing program 4: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r0, &(0x7f0000000680)={0x3d, 0x75, 0x2, {0x32, "b696fceed72652b20e3a306a64515f9336409f312ea1816f6a52e7921952db30cd04c0558aaf3eb1ceffc1ab7a7d8b3d9c04"}}, 0x3d) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000001540)=""/232, 0xfcd4}, {&(0x7f0000001640)=""/110, 0x6e}, {&(0x7f00000016c0)=""/164, 0xffffffffffffff13}], 0x3, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x32, 0x0, @thr={&(0x7f0000000100)="55eae9a803ef20c3d489a1a4b83eb3f46bc7cc356c7a3850d783c2f0fa789691f38d627a48835bfab07fd89f5af6689164e1baadb26e19d3719caca5bd4660bb705e49b0f6c5a9", &(0x7f0000000180)="11390bca64a3344f686c39a9730ca3832cc6f3cfc38de5ef536d61ad83494ebb51e43640c2f0972fc0d96531da3310a70c2d68f7fce0d49271f35e9ae3a065ac173659518928dacbea5facfb5b27f97745b60e349e1ceba0cc1997d6019413680c25cb92f0ee12837e1181fc8080a56129afa90afc372b5e54a451d4be42e5d7d88c827602b729a64b026630dd3e1d7f895b1a5e4999440627961d889c5c6c100cd5e6816b4902ab380ddca4da00b1659815806cbdecc6363f7362dc0c2d72c9f69d5a88b7579a62ed756d06658090132182d9f6dc69b7251d83"}}, &(0x7f0000000280)) fgetxattr(r2, &(0x7f0000000580)=@random={'system.', 'eth1wlan0user\x00'}, &(0x7f00000005c0)=""/76, 0x4c) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x3d, 0x6, @thr={&(0x7f0000000340)="61a532214dc0cad7ef7048167e6167d4af1aa68203cb6b1ce91fa1f5746cfa55b416f0474d3c4acef302608813438e6d234cbd69bb977a2fd1d04cf642c3a95753aeb016516d10ade0ba3a42b404c10cca0d53aeda7929de97b1f72bf0d9043132abeb4f75868aadbad6b93162b54c8ef1f843d600773d1fb736edba20df06b8e9fdca471f91c777a7d706f3cc27bce9d6db4e96c2078d8f75b27c0119fc7b31004578cccefd2eee51aa335292865918de357e", &(0x7f0000000400)="32d57ef4cc545892d7cfe8907f17f8e52b3a51912c346708bd377de633c0ba2df392b5147292b19ea5960ad25201a5155770350e0c585c9761644017771e26b9e29386b7ff4abfc4aefdefd1519abc7a6ac212a8ada3db60787a6ca059268c148cff4469a998ed022358cf28b13876912ee5656c7a9ba6f4449ab0aa7e81ac2ff7f881621c33f9b0ef332b6aac78da1ae02b26977916321dd5"}}, &(0x7f00000004c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000500)) tkill(r1, 0x16) 20:49:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000002900000004000000000000000000006ab02bf2c4d628dd0db6ffa946f765b4001800006201673d0029000000040000000001000000000000c73eee9e4aad6a1147ba300758de244db4e40e23b34615bb6f2a5adb11a7fb7d1344b433a048d9f56dd2dc65bd74"], 0x30}}], 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x400000, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0x3ff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="ef3a9d38d6f476d5bdd8156c6f9023240c91e65055c72aca6bd4a2c9ef4f5e61a9c2aa7235f3726ebe994ac0f132a29d77e457cc27ea7b2d08728ea0355a84eb8fe887601a9f81a67171c500a4be3abf8e118a5df32e5f2f595b303a29776f05aea7ac7d", 0x64}, {&(0x7f0000000200)="86f4ce86c2ada5c06aec4a64559091f07e4905c1be679dcdb94ac619f022862633d79cd718151df185325240c8d2a9268b19fbabf816ac158ee3c4bd933250f6a111212278ca8deb0677558c39331e3a69a51735a4856f75e632083f5c87ec8e9bd543afb14f8d6ea454031dcaedc7a0f7", 0x71}, {&(0x7f0000000340)="e28027afa1b79416fbdf48367e512a3baea3f7e33b1c9be9704ce24fb30e7101ecbec1eda8b63a4106cc9bcda7ff03dc32ee960f0f0511d15553d38fccc0e7e86db43dc67a0d167de571692f728be3be19fac8e66c34bcd0c9404c85d1019b981ea446642abb4d4eb940031a2222b1c6e532f697669d07f5961fc2acb73ca990960db68801194ee54f837127b7ab46d3fdde0c749d7fa367e67f3baee6e87254b407afec51fe4a4add32b5f5396ff3e3b159c09a25e9ae00ea4da5d529ae0ecb59d70cc1305accac1801352f5944", 0xce}, {&(0x7f0000000440)="45aed4773379e7aca4caed1ef84d04efaea821cde84929f0371f4e1d37fd6b6a1e1a1ae688e96f9a5738ba3a8418574a218f4eb56eee3a441d5fee1af9094b6d536cffa6fa628e600f907ec9b83f4b01ca454fec9219178f9b0d11dd0d45995f47d55a864e941281a23ca337582af5a00916731cc505ba174cae8736b59613af5fad2d0b4acbe01a757868ed8ee2d0dd447e0d8ea40e1e176d4ed3db40318f325e221a5bfcc58c0368ba50583c0663eef7", 0xb1}, {&(0x7f0000000500)="a03a40cc8b9698698f5115ff2731da9593009f3b16ae3c938c4d0fc34c3d6d1e5f2a159cd9f1aa6c7f323345e7aa4d6435561772c8aee3fdacfd94180cddac2a0d710e1b89ce4b469b740f6f1712cc5041e52a9f46606589b47458de28b5b4821ee0f643111651e2ec7e10b2946e120d184c9eba81289d9722f9bbd208ecd465aca2da91207e6c", 0x87}], 0x5, &(0x7f00000005c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5b}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x2e, 0x7, [], [@calipso={0x7, 0x30, {0x7fff, 0xa, 0xf, 0x101, [0x4, 0x80000001, 0xff, 0x100, 0x1]}}, @ra, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts={{0x40, 0x29, 0x37, {0x67, 0x4, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}], 0xe0}}, {{&(0x7f00000006c0)={0xa, 0x4e23, 0x5, @rand_addr="616198718f939f1a63585178bfca3ded", 0x3}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000700)="c7774a660a8b33a9a1db2ff356e95ec3ab071851d88c4bd509b1830f5775e2d0", 0x20}, {&(0x7f0000000740)="e2c70fa443493203072edd368588ef2c0a1c25a014e59f2634ae116e1810cf877237ea9d52332585c6767fbffc39544132186281bf1158622ad17076610c8b06ab1593a311bd14ad8c2737f6a81ba0a1b5097928436f4db4c7b7431d9c2f25ca554610ede02e5c51639a8b9d242adef0ca66", 0x72}, {&(0x7f00000007c0)="34106c0f896afcf4aeb560ad0839eaa34577fe2948d3276b5b91d351fdd57c2d2ab55a27ec08ce079f5454f1cb00d6b449472ec1d650e174b0f863cc5bb924144d43411d1a780c9b0f26e6a165224ed21a64a8bf6e96416dba7a51b94167f82427665289dc42265018ee64271e776af9f5b38c2a5a890d34afaa4827ab8899c14eb0f9", 0x83}, {&(0x7f0000000880)="bc3903dd964aaffaa6a7d1ce3e877812c53a0c0b1261da196a2be38372cf93c576a015d9052c324eff35a7e53e624a5c4d01a45edf4abe7458bcb25d3a229f67292b7c6b88871ac2afe5f5676fd5f27f53730e091f1eb8f340cd1e2f23c816f5823c438faf11cc1b4579845578540d18a8a750a37ea97efcc46ffe0e539574b0dc7f11a9eea25fd4d0bd9b81af2691b1079417a77033b5f40d504fe7519049c73fb942b7", 0xa4}, {&(0x7f0000000940)="11eafd35d96c67152ff3d61d4455b60a34fbba1f003cef71dc8271608ab1795a1006eb566c958ccbf0efc3905211047122dfdb62a855422c9f6dbae9c25696e7b923c0440a36fb69cae871599c67f7fe2cc74f99567a4c8d0581c64c7a3bbbfcd342c3ecdc2e64421fa69d8645fbe43dfcc6773d0f999825ae751596254363e6e27bccc35513056ead28cef18d98cf6920f9e7e1b7ca4f07917d1579efc5e9d6f11efa97e251900bfd2bd53394bc60136598b8967976c74a", 0xb8}, {&(0x7f0000000a00)="2281ece62e5c3689ff223651a64d7b0b2c709acc366c2f2b18ab8927657b31b976d815b6941c4ff89484d4c91434ac15d452dc0604e094e116feab80960713131f1d5386c75806cb64fd7479c7406f5b5ae46dccb9e15459", 0x58}, {&(0x7f0000000a80)="24aa33cb22fce7999cc6f81529167164d67a0e01ad50505418370b943afcc27c1ef6c8e49d79f1ff193d5bc5245260d19d15530bc94bbc13546c64e64d769e32230337d187c6ae8e33f7d5e11096c817509d6e7a31bfb046967520e88f062ef949dd4fbab5c46ce761068ccfe0dce5cf072e671c3090e7df85cbde06a23316def04895fe41bc56b5b747d419ef9a6ee225d814c52dc0c11770726fb36caa912a", 0xa0}, {&(0x7f0000000b40)="372fb2cade6c5aba0d6986d500efda100f5c6334e2c70099871a0d72f1ca171ced90e4319ccc1a36a2d610560dd483b37dd6175623d42aecd80256cfa774313e5f28805cd9f6c9b4c58a4986d39e00e97b211d3f3b0b79072625fa87c68b6f4a7cb3ea0af539e7ff5ad9aec43dad3c53db1cc57a9118988b6713386a06d987568e13563ff3b4ed08c92fbbace90dd0fd5cfc45ea25b50e4bac150ba4f11b65550d4d810efccc6556621b26e2064853f60deecb1b649968f38f0111d2b7892d1fe0dabb712aa1a7", 0xc7}], 0x8}}], 0x2, 0x4000) 20:49:57 executing program 2: mknod(&(0x7f0000000140)='./file0\x00', 0x80000000000c6, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r4) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r5) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r6) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) keyctl$update(0x2, r6, &(0x7f0000000180)="f289f5c1b7b71c5ba6800f71ac90a752d70279fb7b54675595a21074237b4ef6a18d49b1961d6dd429f7eeb272d19531b60c7a64ed56961866294bfe6bdb9a46013c69267362f673cb8e15867c4e917e33609dd98cd31067219c448175471cfc0d579b652973b3598b9e279d255b981c90f5cae8c058aafea01e587d931493f85bd8cd22f403d0808b3f03b671fe80718cf44dd458c4c1e35bed65f870bd17ec22637a2c384467dd242ca7cb29e447c2c9192d1b2e301cbfe289d4fdd3ab5ce32fa1ccf22e27d63d384849471c2ee1be1956a57b", 0xd4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20:49:58 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) open$dir(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xe) fchdir(r0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) getpgid(0x0) write$FUSE_LK(r1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) socket(0xa, 0x800, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = open(0x0, 0x0, 0x1c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x22) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000840)=ANY=[@ANYBLOB="8408000000255b"], 0x1}}, 0x4000413) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(0x0, r7, &(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 20:49:58 executing program 3: socket(0x2, 0x2, 0xfa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = open(0x0, 0x400, 0x0) fchdir(r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x50000, 0x0) ioctl(r0, 0xebd6, &(0x7f0000000380)) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TIOCCBRK(r2, 0x5428) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$TCFLSH(r4, 0x540b, 0xfffffffffffffffd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="88a4a23611c3fda00cd638189101427753e9f21aaa8174e5c3012ca4ece020d5374201fe6d0e3d650d41466d57b50d53b1461ff4cb4a16748f50c3aaf5a85da0442ddc6c884a7e92bd927fb6915257afcca447fcd3fe9b039dd80f1c4df1ace6188d029993f12e2c3860515b6ce99389667a2257ac702556"], 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x8000009, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, 0xff) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r7, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r8, 0x541c, &(0x7f00000003c0)={0x5, 0x5db5200e, 0x6, 0x4}) accept$unix(r8, &(0x7f00000005c0), &(0x7f0000000680)=0x6e) r9 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x40400, 0x0, 0x3, 0x3, 0x0, 0x3}, 0x20) 20:49:58 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x20000) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) linkat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', r9, &(0x7f00000000c0)='./file0\x00', 0x400) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7}, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 20:49:58 executing program 1: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffffe) r3 = timerfd_create(0x9, 0x7a9d32723627e6fa) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000400)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat(r4, &(0x7f0000000140)='./file0\x00', 0x43, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r7, &(0x7f0000000040), 0x8000fffffffe) writev(r2, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x24, &(0x7f0000000100)={0x2, 0x1, 0xd95, 0x20}) fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0x10, 0x8000000100000003, 0x0) dup2(r9, r10) r11 = socket(0x5, 0x0, 0xfe) getsockname$packet(r11, &(0x7f0000000040), &(0x7f00000001c0)=0x14) sendfile(r2, r7, 0x0, 0xa5cc554) 20:49:58 executing program 5: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RRENAME(r4, &(0x7f0000000900)={0x7}, 0x7) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000080)=0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0xdd82a34e1fb6018f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b08160df7db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xb) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x33b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) dup3(r9, 0xffffffffffffffff, 0x140000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xfffffffffffffd72) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004180), 0x40002f0, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r13 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) r14 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0210040007000000002000000000000008001200000000000000000006000000e7ffe8000000000000000000000000000000000000000000cd006ef795a63b19298b6e28198740e6fe7a33ab3c119d5059d8bf7de10b38ab04ceee0f528a22e0ead8edf3fa7a0926e9dc47b62d379d04cadc8f7ce4acc476e53dd7f4395d3a2db614b959e93fdc27afdeb76141e95296ca7211c6d9133273474fbc379d8340b2cd2057c273d4b235c885f0015c7faf3dfb14ee1591e377523afcb638deeddfa90d690592e742ba381e08148e991636866c6e16e4677e205200000000000000000a6ca5cfb983688989f18cb5360df5c6021cf3bc6ea569246bd9f754ff1e381dcf8c84b0b4f3fa1b95348753e629a6dd4d455cc366feb3b91e2f9ce3661c1f142ca0293cec14e7b9ecaef6c4f6e89d698f31533df308f179969c27ff1b5f704a2019349fae8ae89048100fa2113e459407d5912f00000000000000000000000000000076700d538c6c6d0809e2851722095388c8bf829e6125c6b28d73abff4c608abde625ffffff7f1baa1ef8da4db0063b3f39dc8defe21cdaf8be038f77f8a7111152f78e1d7593abc2e46f8d3fe805ac5b752c9aed653549851c126db97ec5b4e62f20ecf4db9a6e616c6efed1192d062bcd8806e93dba1ec2f7721a08b14f5f17109d8f0e5a3af2c57260e15554e0f93bf828262d051dfae08600070f0b78a3939ec44bd7b4285ecd7041981ea90c207ac05ef93dec0dbd99611794bc26812b831eb28e7b69bc67573b32ccf52b6776887669bd4420ec107ef56631d7c965bcaeaff28f86771fd6211e99f3adfbb58b9872f9f07913c3a34dc681c51bf88fce2bd5f78b0f78978610d08f3c1acde9f960847a27d39c582407e93e636d0976ee904184ba39b850924fded5b374b362bc047d25ab068703a4e8fe1807aaea4e4a4ccbc4bad65d5f91e6c398d88ff17dc67c7ff6bd6d776b7adec35fcd4fa6ddff57869d32f92e97f47da9c89e8cecd0ee00005027dff9b5ae35df81f632969f40309077a3eb2ab2c520df2f3845e3323342839e4f22d03bfa5f8afbfd2795335403592c61e13f7fb17bf67292d18013807d9db7993aa2691baf2a2f4effdcf093380fdfec203b10f3bbd267035dad4e92ba831ccf87270ec5083b400f093601ec6f0cae8e25df93af448818ee381c9d2eb09c3d61355b35778edd9181c336e2085580f58e438fa8b1f05b7079007c1b8dd1d612f893f7798131941ce0fb30df20e56dfe84646a2b7b0cef154f6393eb7a020b40eea4462d094d9873a1e6a19f20194894d14e36a464fa5ebcb9f552bd484d917e244196c64a6b30f74ed8d37bc6fa54e4a0135b987c3d30ea06fc8858d1dce594c9bde06360d741ac4da14dc4a74df6f0ca502d9e4fba790d0a31de20562d8700305154e55cd05e4644d413d462cf327c3b22f765de97a6c24b1911fb2111309acabe64b0c42ee8aaa11a311a1c19ef5389cd00f353a17d23605ca20d33b10b53f2832d18c6e072d92fa3b2923595882bce541a7c0ff588517438eb04cfc75c056dec9481307b6220716bb76b48dd7ceca8f21cfae3b52cd60c5b451fc0c0f58d5f05b010eef5063e921d5039f3715322e1f84edc48113024985625e1c141c3a8e1dd75789b6583a81e7ac49ad4755d93741918aa0920811b0582b4e121efc89138b20a18ffe576b84ffd3dcfa99a653facf5223f74686ecb818ab95eb0fac0c9f576250be7587a4050eb6b6ff5c312fd6b974e066afd471ba12b8c491de42641d46f360108fe1d941f5eab1c61ae59500f286b6ed982fcdafda67d4cbe47b725275a1989f564d91180725bca7db01252909f272cefaab623651686f26e497bdea38ca3ac08be35b9c234abf2e3a60b1772ea9168256e6cf336129d520d60917ef89e14930b48fd3a644defdd357952025133a050633ca794aedff6e1e67fdb0383141f7613974c68b78a59597c083f6b9190f0468c59bbbebb2e7f88cf974d6fbf2abf0d"], 0x437}}, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x42, @loopback}, 0xffffffffffffffd1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r16, 0x0, 0x0, 0x110003) lseek(r16, 0x0, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r17 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r17, 0x0, 0x20008) r18 = socket$inet6_udp(0xa, 0x2, 0x0) r19 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r19, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r19, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r19, 0x0, 0x0) r20 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r20, r20, &(0x7f00000002c0)=0x202, 0xdd) r21 = open(&(0x7f0000000400)='./bus\x00', 0x40, 0x40) getpeername$packet(r21, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r19, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r22}) setsockopt$inet6_IPV6_PKTINFO(r18, 0x29, 0x32, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet_mreqn(r17, 0x0, 0x24, &(0x7f0000000040)={@local, @loopback, r22}, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r23 = open(&(0x7f0000000100)='./bus\x00', 0x22000, 0x8) sendfile(0xffffffffffffffff, r23, 0x0, 0x20008) r24 = socket$inet6_udp(0xa, 0x2, 0x0) r25 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r25, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x4, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x0, 0x1, 0x3}, 0x20) r26 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, r26, &(0x7f00000002c0)=0x202, 0xdd) ioctl$sock_inet6_SIOCSIFADDR(r25, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50}) setsockopt$inet6_IPV6_PKTINFO(r24, 0x29, 0x32, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet_mreqn(r21, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2}, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r16, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x17100010}, 0xc, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="020000007000fedbdf250200000008000e8f771d3beb0595e405e3a1e0256b1dbab224a2d4c0e33623a7267c656c4b6bb61b5214128525f9c56ae161371ddaca922a1c9ccfd33c973ea9e5373efe3c47", @ANYRES32=r12, @ANYBLOB="9800020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63", @ANYRES32=r12, @ANYBLOB="4400020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r22, @ANYBLOB="f04e48e100020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b3db420c9c60864a0000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004005b4800003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r12, @ANYRES32=r12, @ANYBLOB="10f8f27cf6030000002e4ac591106feeb30e6aa1c07e7a4e0df586cc3ecb12010000000000000063e47a02adc1397b31d2cf7d973ba6f6c16585a1a2d37f7ef6acb2d5064115dc66ad4cfe4ecd86a58fd642e62fdc79905db5f0fb4179ac6ea9b2a7c471430e9c107b9a9be47b1b00", @ANYRES32, @ANYBLOB="0001020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e636500400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400800002020080000006000706010000"], 0xe}, 0x1, 0x0, 0x0, 0x40}, 0x8000) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) write$nbd(r14, &(0x7f0000000480)=ANY=[@ANYBLOB="674466ae0000000006000200009b03a4fedba4de4c9ab9d71561a52047da263d9b80cf8e9a7dea7e2ce4f2d1ffff76429723517c46149c8e8408b71b5825000000000000007f110a506fb04ec637ef8e6ec13dcddafe7a25a0d15b5d67b66992602b2c81e96637ebabfa12c7399e21b0df77dfc74e5cf9e76f3f39a601d4c5cd656b1ac677cee19ddf7bcd9b81a35917ad030ee588bd92082c2cb77472f39248b10cdc3fdb2559ff519361b9c986e54a5e53058e2599ce4a17c84e93cb26d5584fa6e89b7fe68b101b448683000800005681eee961e1e576"], 0x10) 20:49:59 executing program 2: iopl(0xfd) socket(0x0, 0x0, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000000)=""/28) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r3, r6, 0x0, 0x7) r7 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000380)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$RTC_WKALM_RD(r9, 0x80287010, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000780)={0x6, 'veth0_to_hsr\x00', {0xb932}, 0x6}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r7, 0xbc, 0xd1}, &(0x7f0000000180)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7374726565626f673531320000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"/79], &(0x7f00000004c0)="47a3bbdc76b8d339056b32745b58606adc07941edd278a9a731af8b5f24b0566311af3a8b47b6ca505fb846432c662654cb60fd1e32c8d595e86a40947ccdcb878f1cb265abee6d20bbfe33b19c50674f1edeb45dd6ba7b05bb4f79d0e04c32f70c187958e63e6ab5d96a364fb772f2a8d5c3da65cf99fb8d34c38c954644142e094db5227d76895eaae6698d5c7ebc48d4886a3211c71bd1b8450a77fac3073cfdf4452e0a2e120e9d499c317c0a431228fe0157b67045dda5acd29", &(0x7f0000000580)="0e1320a8b46fb3020addedc5b6449de94fb350a40bfc54d509ec00b17f1e73c0ca20997c20f7b0d948059eed5b03bf7dd24f88990a657bc6c7bffab906d2fa217a69f95ec487ab6749273c50a2e6d0cf63416c25e49a76b4b1a4eb701d79a0f97183f7aed6f9c433398643f598b53def3ae3e0b3037bb5b48b5544e41a5489780d85824556da6750d64c862b73dcc1cc0e8398448a4d94514f8ea99630742a1b564462b37ace87ae2880effc91723d2614c82f0c764851d5e0d5da1f1b878532373fb6e03e9a3a70e77498495dddc8d108") getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) r10 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r10, r11, 0x0, 0x400000000088001) ioctl$BLKDISCARD(r11, 0x1277, &(0x7f0000000040)=0x2b7fa229) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendto(r2, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) 20:49:59 executing program 3: keyctl$get_security(0x11, 0x0, &(0x7f0000000000)=""/151, 0x97) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xe2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8002}, 0x80015) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000340)) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x7aa6, 0x7, 0x20, 0x7}, {0x2, 0xb3, 0xf8, 0xffffffff}, {0x1, 0x7, 0xff, 0x8}, {0xed1, 0x9, 0x8, 0x7b1d}, {0x400, 0x0, 0x7f, 0xa042687e}, {0x9, 0x8, 0x1f, 0x1103e256}, {0xffff, 0x2, 0xd6, 0x2}, {0x81, 0x0, 0x1, 0x1}]}, 0x10) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000000580)=[r3, 0x0, r4, r5]) r6 = add_key(&(0x7f0000000640)='rxrpc\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)="a2cfa7ff7bbac2fe9a6fc96580f6c5cd36b092ac23f5bc5f54be", 0x1a, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f00000005c0)='logon\x00', &(0x7f0000000600)={'syz', 0x0}, r6) socket$inet6(0xa, 0x5, 0x7) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000700)={{0x2b, @multicast2, 0x4e24, 0x4, 'ovf\x00', 0xde2f8cb60b833b88, 0x9, 0x68}, {@multicast1, 0x4e23, 0x2000, 0x0, 0x6, 0x4}}, 0x44) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETXW(r7, 0x5435, &(0x7f00000007c0)={0x3, 0xfffe, [0x1000, 0xfffc, 0x9, 0x1000, 0x7], 0x1000}) munlockall() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) capset(&(0x7f0000000840)={0x20080522, r8}, &(0x7f0000000880)={0x7ff, 0x0, 0x401, 0x8000, 0x2, 0x20}) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/urandom\x00', 0x40240, 0x0) truncate(&(0x7f0000000900)='./file0\x00', 0xfffffffffffffffa) prctl$PR_SET_ENDIAN(0x14, 0x9f1a0c98fa80c236) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000940)=0x101) dup(r0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000980)=0xc) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2c020000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x124, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5f2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x29}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x37, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f0000000c00)={0x3, 'ip6gretap0\x00', 0x4}, 0x18) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 20:49:59 executing program 1: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r4, 0x8004700d, 0x0) geteuid() request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x1000002a5) keyctl$describe(0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000340)='./file0\x00', 0x115240, 0x80) r5 = open$dir(&(0x7f0000001280)='./file0\x00', 0xa000, 0x0) openat(r5, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'team0\x00', 0x4}, 0x18) io_setup(0x9, &(0x7f0000000440)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000031c0)=""/4096) [ 656.275828] audit_printk_skb: 9 callbacks suppressed [ 656.316066] audit: type=1400 audit(1575147000.129:1689): avc: denied { create } for pid=18445 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 656.318797] audit: type=1400 audit(1575147000.089:1688): avc: denied { create } for pid=18421 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:50:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ifb0\x00', {0x2, 0x4e22, @rand_addr=0x2}}) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x10040, 0x0) r1 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b5) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}}) unshare(0x40600) creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) 20:50:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x1b}}, 0x14) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000080)=0x81, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 656.473355] audit: type=1400 audit(1575147000.289:1690): avc: denied { create } for pid=18445 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 656.542805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket 20:50:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r1}) fcntl$setsig(r2, 0xa, 0x3a) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = dup(0xffffffffffffffff) write$P9_RREMOVE(r3, &(0x7f0000000200)={0x7}, 0x7) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r4, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r6, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r5, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9b5300", @ANYRES16, @ANYBLOB="000129bd7000ffdbdf2502000000080001004e23000014000700fe80000000008001000000", @ANYRES32, @ANYBLOB="080003002f00000000fe800000aa1400070066e329c7949daacfcde122b5862fe9b000000000000000000000006273a4a3bdea40f5777f6d80d69d552026b1a2949b1b0817d3d818c2d553bdedb0c72f7e96af32aae0b3f7938f36fd1aa5bfb8e9899c04f47ca0702163a5abf1f090379db13084b83157f7e55b8ff4fd0dbf9071814b501bc4477476b6f2e3af82e6a72bdd9dcc85fb19919ccd75ef834d75fab252a7887547ee8a267fed62142b99e3d7340b1479a28b769ae291acb75c81da3776d35886338e88ea29dea41909ae1db83d18fe14724a39f64e5d"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendto$inet6(r8, &(0x7f00000000c0), 0xf0caebd3, 0x0, 0x0, 0x0) 20:50:00 executing program 2: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x5, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000600)) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='secu\x8f\x97evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r4, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000344bd7000ffdbdf250f00000044004e7408000b00736970000c000700500000001700000008000b00736970000805000400000008000b0073697000080001000a0000000c00070011a29b86f6d4a302c10004008217144b08000400ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4050) [ 656.993072] audit: type=1400 audit(1575147000.809:1691): avc: denied { create } for pid=18445 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 657.091969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket [ 657.103262] audit: type=1400 audit(1575147000.919:1692): avc: denied { create } for pid=18445 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:50:01 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0xa81b950ac4e691b3, 0x1c, 0x0, "698fb6ff5c48ae294e3a0a7c446ee0dcddd6dd3ac4140e1c5ad179079fc82839b8f96221755aa3d9f20579665b61d48f643f63ee19f7b06e7dde334dc70d7ce9", "023fb2ca5ade0d12e2080cc42f08db22c7168d7c75f231c6d844c4f120023aae", [0x200, 0x7]}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x3, 0x3, 0x9, 0x0, r1}) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x3) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x1ff, 0x7, r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0xa) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000240)) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x101000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.current\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000300)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000380)={{0x18, @local, 0x4e23, 0x1, 'lblcr\x00', 0x0, 0x80, 0x43}, {@rand_addr=0x4, 0x4e20, 0x0, 0x6, 0x9, 0x3}}, 0x44) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000440)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, &(0x7f00000004c0)) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000500)=0x3f) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r10 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x800) splice(r9, &(0x7f0000000580)=0xa4, r10, &(0x7f0000000600)=0x9, 0x6802, 0xa) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000740)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) setsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000800)={r12, r13, r14}, 0xc) 20:50:01 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x3df514ce153d4a9d, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'eql\x00', 0x3ed8f24c44c677b2}) dup3(r0, r2, 0x0) [ 657.797947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 20:50:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d04ea49ebfa4bbb51c72dfa716576ecaf661d7b96928528da2d15f600c439fd89cca138040a26ca156efe6f61a5b749b7c308aad8c20c68e0133825a2bde5210ee2e15632cffc49298910aaef515e3d0dd06e244be66f4f55236684ee4521df2b69692b62097f5c34cbc33775b0ccbfc04c40cc1fbde9f44d58a9bbd1f007a6e8eb59476b206eba297cfa1f44231e64dc19cdfc30614a4b680048f0c068e13fc55a76ffe257efd0c1ad85b953ff0ae55bc7e040d36519f814579638ea6cd0a74add0936ddad09792704993c76880fefea7f4f1e53fcb53d583c6149a1faf8eb01e2e4cb1d52165d7149ffb2ec9a08c098c90a4321d96162e", 0xf8}], 0x1}}], 0x1, 0x40) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000040)) 20:50:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffe5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x15) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07002b00edfffffffe0701000000450001070000001419001a00120002000e00010009000300"/57, 0x39}], 0x1) socket$packet(0x11, 0x2, 0x300) 20:50:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x56) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 20:50:02 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{0x0, 0x24}], 0x1, 0x0, 0x172}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) readv(r0, &(0x7f00000000c0), 0x2d) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r7 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) eventfd2(0x0, 0x1) r9 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r9, r10, 0x0, 0x400000000088001) fstat(r10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) sendfile(r7, r13, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r13, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf25ff020000000000000000000000000001ac1414bb0000000000000000000000004e2100004e20000700008000a2000000", @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="04000000a0", @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000300010000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$EVIOCSABS3F(r15, 0x401845ff, &(0x7f0000000100)={0xffff, 0x3, 0x6, 0x3, 0xa73, 0xffffffff}) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0xa, 0x0, 0x20, 0x41, r6, r11}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x100000001, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r16) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r17) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r18) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r19) fstat(r13, &(0x7f0000000380)) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r20) r21 = getegid() stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r22) r23 = getegid() stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r24) getgroups(0x9, &(0x7f0000000140)=[r20, r21, r18, r22, r23, r16, r12, 0xee00, r24]) write$P9_RGETATTR(r4, &(0x7f00000001c0)={0xa0, 0x19, 0x1, {0x40, {0x10, 0x1, 0x8}, 0x30, r11, 0x0, 0x6, 0x9, 0x7ff, 0x7fffffff, 0x1, 0x3f, 0x5, 0x0, 0x9, 0x90, 0xbc2, 0x7, 0x7, 0x8, 0x7ff}}, 0xa0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RSYMLINK(r0, &(0x7f0000000580)={0xfffffffffffffe9a}, 0x14) 20:50:02 executing program 5: mkdir(&(0x7f0000000000)='./file0/../file0\x00', 0x30) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000704ab095806090007000aab08000600000002ffff93210001", 0x1f) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xff87) [ 658.777279] audit: type=1400 audit(1575147002.579:1693): avc: denied { create } for pid=18510 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:50:02 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x10000000000000e5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000240)={0x18, 0x0, 0x6, {0x4}}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) sysinfo(&(0x7f0000000000)=""/50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, r9) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) 20:50:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x28, 0x105}, 0x14}}, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/240, 0xf0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r4, 0x0, 0x400000000088001) fcntl$dupfd(r2, 0x0, r3) 20:50:02 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x80000001, 0x4, 0x6, 0xff}) r3 = getpid() r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000001c0)) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000280)={&(0x7f0000004540)=""/4096, 0x1000}) [ 659.312830] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 659.336106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 20:50:03 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00w\x06S*6\xee\xa8?\xbd\xc1\b\x10s\xe3\xc76\x87\x7f\xb9\x1e-\xcex\x18k\xb9h\x9f\xe6\xe5g\xc0Q\xc8\xc5\xcb\xe7\x05\xd1A\xde\xa5\n\xcc\xfb\xa4-\xde\xa6v\xac\x9aw\x89P\xc7,\x1e\xf7\xfa\x1f\xa5\ak\xb8\xd6@n,H\x06E\xd3\fm\xe3\v\xadD\xe5\xe7\xaf\x85T\x85\x9a\xce\xcb\x8a\x01T,]\xbe\x06C|\xe8\xba\xfe5\xdaJ8\xb9[\xbbW\x9ei}Y\xfb\xb5\xc7\x97y\xf3>\x05+\t\x1f\x1bM\xdcM\xd2\x95\xd2F\xb6\xe6&\xa8\x84J\xe6\x15\x7ft\x9a\xe3\xcfB\x84\xa2o)\x92\xfa\xe1\x8bR6Sq\x01\x93\x8cV\xf2#!\xb2 \xdf\x00!S\x9f\xef\xf0\x05\xc6\xf9\x04\x88\\\x05\x93\x99}\x95\xde\x94f\xa6G\\\v:\xee\x80)\x87\xb9\xe0\x87}(a\x8a^e(\xe0\xfcl\xbb~\x03\x1fq\xd2\xfeD\x8a\x13\x92e\xe6\xf9\xae:&H\xa6\xd8\x8arT\x84\xa5XN4\xf2\xf9\xad\x9f\xdf\xbf<\xd7\xf6', 0x200002, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440), 0x12) socket(0xa, 0x800, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10) socket(0x18, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xffffffffffffff40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001180)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0xffffffffffffff7c) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000006c0)={r7, r9}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000000000000000000000004e24ffc14e210101020080b000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="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"/598], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r11 = open(0x0, 0x8240, 0x8) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="cc409948fbfe3e60e7a70f706b49c43425710203eec48efbd7ff1a21d36c1cb075d48f1cdcad78954ce35d5ac84967ac58ac0711a7dae655f6bccf7b079fea28e8835c8009e1698857e5f305467fda0a92f77701f733774111db73d2e2496ff6ad80b26047b522c18cc380d11adb53008c3afd37006bb7f4c317192f018e0e23146bbf848d4f6c839041149fc9d84e0059ff814c64c0393841b6e401e221e11161fbef2acda32869596da0ee57ba6a45c637577c296c7f9e"], 0x1}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x1ca, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r10, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) r12 = open(0x0, 0x0, 0x0) mkdirat(r12, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x161800, 0x180) renameat2(r12, &(0x7f0000000340)='./file0\x00', r0, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 20:50:03 executing program 2: clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x5, 0xfff) socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$9p(r1, &(0x7f0000000140)="0aa7e537ee703b111cd6ddb2050e77d4b107c26fe17780b901548a6c9a2e11038375e86ebdf10411619d730f044aa64e0f4bfdb1ae27e2db6157c9ca84267abc3dc0008db9c189086cfc2b09f5984247dd93805a1ffcaf4e5f68d00481df", 0x5e) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getsockopt$sock_timeval(r3, 0x1, 0x15, 0x0, &(0x7f00000001c0)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0800000000000000ffffffffffffffe900000000000000000000000000000000030000008c0e39a8a6515de9f6a8f48ba82e0977db7a06ac98e73d518b3b663d2e002c1a1af1c04e97bc7f0e5804da5ba8c118bc1f8cbe45c1a6b6abdfcba5baf2e6c8f1674d35a0b0da1169afe0cd088a1caba0335457bd0d00259c1335ba3e5e4437cdc33e46"]}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffff60b, 0x2, 0x3, 0x9, 0xd46, 0x2}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) epoll_create(0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x40000, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_evm(r5, &(0x7f0000000100)='security.evm\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/250, 0xfffffe8a) r6 = socket(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x80000000000004c, &(0x7f0000b34ffc)=0x1000000, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000006c0)={0x4ba, {{0x2, 0x4e23, @rand_addr=0x401}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) 20:50:03 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffe}, 0x0, 0x8) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r2}) inotify_add_watch(r1, &(0x7f0000000800)='./file0\x00', 0xa400295c) dup2(r1, r0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffdb4}, 0x8, 0x0) read(r3, &(0x7f00000001c0)=""/128, 0x3ea) write(r0, &(0x7f00000000c0)="740e8082948e891fbcafcf3b50007e28b97f6460f8ebade7863a40b13ffcad93b4bce73ab1", 0x25) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) 20:50:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x11ff}]}, 0x10) r1 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r1) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x4800) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000480)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x9cX7\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\xad\xcb\x859\xca\x1d*e7\f=v \xb6\x990:\xa4\xc2R|\xb9ZOYf\r3\x8e\x01\xa3gl\x1b=\xde\xd9\xc4K\x00\xd6\x12\xd6\x17\xaf\x1f\x98\xd8\xab4V\xb4\xbb\x8b\x95o\xdd\xd8\x1b\t@A\xc4\xc5\xfc\xdeZc\xefK\xf9\xcb\xa0\xf8+\xd1\x99[\xfb\xd1/\x8e\xf1\xd4\xe0NzX\x1c\xc9\xd3\xbb\xd1\x86\xd9\aS\x10~\xf1\xe5@I\xc5\xf7\x86\xa4', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r9) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8010, r9, 0x1000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x2003, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r10, &(0x7f0000000300)={0x90000000}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 660.570270] audit: type=1400 audit(1575147004.389:1694): avc: denied { create } for pid=18546 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 660.622410] audit: type=1400 audit(1575147004.439:1695): avc: denied { create } for pid=18563 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 [ 661.024077] audit: type=1400 audit(1575147004.839:1696): avc: denied { create } for pid=18563 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 20:50:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r1, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(0xffffffffffffffff, 0x400000) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r5, r6, 0x0, 0x400000000088001) r7 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r7, r8, 0x0, 0x400000000088001) sendfile(r7, r4, 0x0, 0x800100000000) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8) socketpair(0x10, 0x100003, 0x80, &(0x7f0000000200)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r9 = eventfd2(0x0, 0x0) fstat(r9, &(0x7f0000000680)) socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r18 = dup(r17) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) openat$cgroup_ro(r18, &(0x7f0000000280)='mem\x00\x01y\x04\"waS\xbbb\x85\x17\x89\xc95\x86B<\r\xe8\xea\xc7\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0x4, 0x4) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x11, 0x0, 0x3, 0x7fff00000000, 0x1, 0xf3}) ioctl$FS_IOC_RESVSP(r16, 0x402c5828, &(0x7f0000000080)) write$P9_RFLUSH(r16, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() ioctl$RTC_IRQP_READ(r16, 0x8008700b, &(0x7f0000000100)) r19 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 20:50:05 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x2008000fffffffe) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{r2, r3/1000+30000}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0xb, 0x5, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x60, 0x0, &(0x7f0000000080)=0x44) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x60, 0x0, &(0x7f0000000080)=0x44) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) syz_genetlink_get_family_id$tipc2(0x0) [ 661.604895] audit: type=1400 audit(1575147005.419:1697): avc: denied { create } for pid=18578 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 661.702853] audit: type=1400 audit(1575147005.519:1698): avc: denied { create } for pid=18578 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 661.841429] audit: type=1400 audit(1575147005.659:1699): avc: denied { create } for pid=18581 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:50:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') pipe(&(0x7f0000000400)) pipe(&(0x7f0000000400)) pipe2(&(0x7f0000000500), 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000000)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) eventfd(0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') pipe(&(0x7f0000000400)) pipe(&(0x7f0000000400)) pipe2(&(0x7f0000000500), 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000000)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) eventfd(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') [ 662.083473] audit: type=1400 audit(1575147005.899:1700): avc: denied { create } for pid=18581 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 662.124606] audit: type=1400 audit(1575147005.939:1701): avc: denied { create } for pid=18581 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 662.407689] audit: type=1400 audit(1575147006.229:1702): avc: denied { create } for pid=18578 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 662.521171] audit: type=1400 audit(1575147006.339:1703): avc: denied { create } for pid=18581 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 662.614550] audit: type=1400 audit(1575147006.429:1704): avc: denied { create } for pid=18578 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 662.680142] audit: type=1400 audit(1575147006.499:1705): avc: denied { create } for pid=18578 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 20:50:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000001340)='./file0/file0\x00', 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000001580)=""/4096) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00'/14) fchdir(r4) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r6, 0xa, 0x12) recvmmsg(r7, &(0x7f0000002bc0)=[{{0x0, 0x39e5cc378bfcfa79, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r6, r7) fcntl$setown(r7, 0x8, r5) tkill(r5, 0x16) syz_open_procfs(r5, &(0x7f0000001380)='net/dev_snmp6\x00') r8 = inotify_init() r9 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r9, 0x0, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1a0, r9, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xac}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffc, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsh0\x00'}}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40020}, 0x2040801) inotify_add_watch(r8, &(0x7f0000001140)='./file0\x00', 0x2a) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001400)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@dev, @in6=@initdev}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001540)=0xe8) getdents64(r4, &(0x7f0000000100)=""/4102, 0x1006) getdents64(r4, 0x0, 0x0) 20:50:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in=@empty}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000280)=0xe8) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000007c0)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x6, r4, 0x2) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x6, r5, 0x2) getuid() r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@local, @in=@remote}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000580)) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) fstat(r7, &(0x7f00000005c0)) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x80000001, 0x0) signalfd(r8, &(0x7f0000000100)={0x2}, 0x8) r10 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r10, r11, 0x0, 0x400000000088001) fstat(r10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff, r12]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) setsockopt$inet6_udp_int(r13, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) r14 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r14, &(0x7f0000000740)) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r16 = socket$inet_udp(0x2, 0x2, 0x0) close(r16) splice(r15, 0x0, r16, 0x0, 0x80000001, 0x0) r17 = signalfd(r15, &(0x7f0000000100)={0x2}, 0x8) fstat(r17, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff, r18]) getgroups(0x3, &(0x7f00000006c0)=[0x0, r18, 0xee01]) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x80000001, 0x0) signalfd(r19, &(0x7f0000000100)={0x2}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r22) openat$urandom(0xffffffffffffff9c, &(0x7f0000000640)='/dev/urandom\x00', 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r23) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r24, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r23, 0x0, 0x12f}]) syz_open_dev$sndtimer(&(0x7f0000000680)='/dev/snd/timer\x00', 0x0, 0x20001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r26 = dup(r25) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) fstat(r7, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000008c0)=[0xee00, 0xffffffffffffffff, r27]) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r29 = socket$inet_udp(0x2, 0x2, 0x0) close(r29) splice(r28, 0x0, r29, 0x0, 0x80000001, 0x0) r30 = signalfd(r28, &(0x7f0000000100)={0x2}, 0x8) fstat(r30, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff, r31]) setxattr$system_posix_acl(&(0x7f0000000880)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[], 0x0, 0x2) write(r3, &(0x7f00000001c0), 0xfffffef3) r32 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r32, 0x0) read(r2, &(0x7f0000000000)=""/250, 0x128b9372) [ 663.299810] audit: type=1400 audit(1575147007.119:1706): avc: denied { create } for pid=18617 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:50:07 executing program 2: syz_open_dev$loop(&(0x7f00000004c0)='/de\r\xcd\x1a@\xb1\x02\x91\x11', 0x6e04, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r1, &(0x7f00000001c0), 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r4, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x111801, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) socket$inet6(0xa, 0x480040004000, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r8, r7) connect$unix(r7, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setstatus(r7, 0x4, 0x427ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r11 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r11, r12, 0x0, 0x400000000088001) dup2(r12, r9) fcntl$setstatus(r6, 0x4, 0x400) write(r9, &(0x7f0000000400)="d385da37c48985c8025f716720c975d335d669a55b5c6a5fa1148f7a463900c3fdc9e1a87e69cef2573eea1fd88efc8cb589e051525b152f9c65ac21e640a009eada93923d9f1f83bab17c8dea", 0x16f7a96b) r13 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r14 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r13, r14, 0x0, 0x400000000088001) write$selinux_load(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYRESDEC], 0x14) sendfile(r2, r4, 0x0, 0xa5cc554) 20:50:07 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.cpu/syz1\x00w\x06S*6\xee\xa8?\xbd\xc1\b\x10s\xe3\xc76\x87\x7f\xb9\x1e-\xcex\x18k\xb9h\x9f\xe6\xe5g\xc0Q\xc8\xc5\xcb\xe7\x05\xd1A\xde\xa5\n\xcc\xfb\xa4-\xde\xa6v\xac\x9aw\x89P\xc7,\x1e\xf7\xfa\x1f\xa5\ak\xb8\xd6@n,H\x06E\xd3\fm\xe3\v\xadD\xe5\xe7\xaf\x85T\x85\x9a\xce\xcb\x8a\x01T,]\xbe\x06C|\xe8\xba\xfe5\xdaJ8\xb9[\xbbW\x9ei}Y\xfb\xb5\xc7\x97y\xf3>\x05+\t\x1f\x1bM\xdcM\xd2\x95\xd2F\xb6\xe6&\xa8\x84J\xe6\x15\x7ft\x9a\xe3\xcfB\x84\xa2o)\x92\xfa\xe1\x8bR6Sq\x01\x93\x8cV\xf2#!\xb2 \xdf\x00!S\x9f\xef\xf0\x05\xc6\xf9\x04\x88\\\x05\x93\x99}\x95\xde\x94f\xa6G\\\v:\xee\x80)\x87\xb9\xe0\x87}(a\x8a^e(\xe0\xfcl\xbb~\x03\x1fq\xd2\xfeD\x8a\x13\x92e\xe6\xf9\xae:&H\xa6\xd8\x8arT\x84\xa5XN4\xf2\xf9\xad\x9f\xdf\xbf<\xd7\xf6', 0x200002, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440), 0x12) socket(0xa, 0x800, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10) socket(0x18, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xffffffffffffff40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000680)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0x25d) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000006c0)={0x0, r8}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000000000000000000000004e24ffc14e210101", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r10 = open(0x0, 0x8240, 0x8) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="cc409948dbe75120e7a709006bffc4755b8f10dbb3c68d3ceed495"], 0x1}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r9, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) r11 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r11, &(0x7f00000000c0)='./file0\x00') mkdirat(r11, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x161800, 0x180) renameat2(r11, &(0x7f0000000340)='./file0\x00', r0, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 20:50:07 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000002cc0)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_matches\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0xffffffffffffffc3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffe44, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002c40)=ANY=[@ANYBLOB="40a55f00070000000000006a358a442600000000000000"], 0xc}}, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) getsockname$packet(r5, &(0x7f00000002c0), &(0x7f0000002100)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r6) sendmsg$unix(r6, &(0x7f0000002c00)={&(0x7f0000002840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002b80)=[{&(0x7f00000028c0)="c74b5b3cf22c368c68bd6f966b8a7d4f9217b2a7d7ec837fd032a762104e53a51ee2b06c7ca2a28b006789bce703ffb95ed3a983b24a8a241fa75e3f7694b98847966c6765449eae5c66fa1a321e05f32aad22a25d6b3218a815e22bbff2bb0788f9389dc3d8d334c5578c520886c00b35a3c762875b72e56314fe99d3973d73efe9149a0c67669c5302cb7c", 0x8c}, {&(0x7f0000002980)="79130272c48f55f7d610", 0xa}, {&(0x7f00000029c0)="aa5ab83c63dca43d76c041947ec66af2b13c90a697238eb4", 0x18}, {&(0x7f0000002a00)="3c45d0a9aaf7cde9a18251240ebefe37ac6e6bbeedca03af733da58a41e6378aaf5fbd8883e04829648a0db0ffefdf3b9ae119ec8be0ea91d9f033d038e35b7cf385b7f9b4b8", 0x46}, {&(0x7f0000002a80)="b1f794ae5dc2ba21990f78548c913bb7ba1bc3748f416f63f0d7f76899f173b8fe52815811c4b9f278f69a3dfb09fa19d9d3e3bca102ebb4c19f926d2ab102cf464004ecc7c811993ad37bd7305a0d702ee3346e8bfd96013ca014ed2f7fa2967eb97e70d06d99e2e3e17a04fdbaa633e35b1f5710f159ad98fa1a3cefd8b46902c83631899b4b6edf638b39ede7c44258b84bf863a0204cbeb7397202fdd99669b24caecbb86337d58654e2aec709ab922ec356120d413d133527271be6e8528d2788f63b83434bcbadec2b3a51e1f7ea857f1227def4be8cb997a06c55d3532dde2ae33443ee246b303392d5f7d237167320673aeb294d9e", 0xf9}], 0x5, 0x0, 0x0, 0x4000040}, 0x20000080) tkill(r1, 0x40) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000002800)={0x5e, @local, 0x4e23, 0x2, 'sh\x00', 0x4, 0x8, 0x6f}, 0x2c) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7}) sendmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="6e76e22a545c39c9e3351e021ee1de6642779ec2d7c717f4db6e51535a128a4d276a031e5a57706fa43cb83fdeac27a0b04979ed5a75efbbf5fea7e491b1db0f95995975ae4209", 0x47}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000240)="a9067324cfe9b9fe123d8f9d1b738ad6c35c924af9e20a1bab8c0f1b8aaaee3e", 0x20}, {&(0x7f0000000600)="6b9b971396e5e0e4fe83b2ec9e35fb3f4ee530c7428fe2e4102084020f2efeee4d8b246cfdc764d6e18ce8c047069cf2b5ea8243e6372e40065fcd3e94389ee04c0d44c6ee20a3d1a1aff8dad625efbee892dc9391841aa9fd852b0a63b6d67edfd7eecdb31f6abe52d29a5758ae9153df74d86d5141e23e2d8e11106ea2e5093569fd17355e204e963f6e899706e3f90e52bff8cb4a140a225f3e82909be2ec3fa97c89ca2d5c504298cc528fee7c1856cf66dffd1d3d68c9583bd095b77a6a38eb7127357304f5335b1b6d8acd6d06ed2aea33702d463f7c9e27ee1df48397aa93c472ade216", 0xe7}, {&(0x7f0000000700)="8137ebdc254db90095efa11b6f3d0bb74fa62454cf46939a7c304bc92469ad58e8c46aa08750df13f06e267621deda1cf24295b60488400d39043054a9ea75faa85e01c853694978c691ac94285a656a476d29475a466cba96d68235107ebfbc7d4369ed92b36312db865d3f40ad2f7999a07bd5fe4d9a280fa4b4e8db604e70e7281b9ec08d569779a942c8f285322b69ce90bdfc917b17a788c4f0f3e3ea5a7cae72dfb2336df87d9988266375c88884979ee7b9cf43b6538c3fc265b8b0a88fe0d7b9b788515245f2", 0xca}, {&(0x7f0000000340)="3ad490acb1ab2af036ba773ea42e75e59deea74303b22c3c7feada53d4f24c6c5f3e612055dc74c60d7a60594c733f4d603c96a2c02ac41e485b8e86b4d4455009cceb996c8fdcdc5b7b9029f23d01b891658a94ff6113b40fc9ed8acc64c6dd08db", 0x62}], 0x7, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000880)=@l2={0x1f, 0x0, {0x7, 0x5, 0x7f, 0xfc, 0x3f, 0x3}, 0x400, 0x2}, 0x80, &(0x7f00000002c0)}}, {{&(0x7f0000001cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x3, {0xa, 0x4e23, 0x6, @mcast2, 0x3}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000001d40)="d7f8597d153d9c399867d1f19c8c2d8d86c2c15ddb3d5e4ee8b969401472eb403ffc64fc806d8976d696e9898b558982763276cd942f2fdfe412559d627bdbdb6ad515debf65c0bcdb066cf5eb3614e15bf2096518036be12042198e795dcb1fa5ab0ea28bf7500ab710017567298f467d3780d01a6b86ccb0bbf385836295d466c3ac0b33a2db9ad549dbb3d6cf2b31f0e16d85d8ee16841407f5ca02415c3a7945a4ed77ee080c71a371", 0xab}, {&(0x7f0000001e00)="d23387d9a20b3c8aebe8dbbe2ff9b93148491cf28d18cfcd6671b4bcb1c8f980492a512058c52f18c68a17b2279f5e1e379565c7f59946bbd421916e1914da59e1789777138edd9697699ea600f3b46736eb974d973e776760eaf1b513a119c7c370704e213bdfb04975341af1a2773e4e8e631f664e17ed023f7c0fc9ff9cdefccf1798aab784df265b533b34ad5dbf6108e0b214f9c3222bde8eeaacd7698f2cb41f71e9b333d957fa", 0xaa}, {&(0x7f00000003c0)="29ffa4dcc47b895180434d7a247ef217cef9a922210bafa78afdec72d6588c8916959eb734a04c718b", 0x29}, {&(0x7f0000001ec0)="bd22f7c302913d268d69029be7997abe3683f4af31bc081f843950ba1768a416292a851540c2442337d72b19db427fa89f48c3fa7d87f97c0fd92f744f302a09ecff207620cb8ec9203b6e510aef9b105911d965a70ac8b026fe0e19d09e3b6b71", 0x61}], 0x4, &(0x7f0000001f40)=[{0x108, 0x1, 0x9, "279b1fc71ed45e659331239240287a353bd24009e6d47d75659d2c38b4051448f82e0a06b7ff5c2082f1a05ecb59ecb67f74b15a24cfa6536e081f6aa33bf57d2b287dfd2722d4d10c69c71bab02bc030fa4723dfe988a84838468e290c1e60a9efff59b88b29aa01d3b04ac78eefef1d012f0620bc8c5b62d3263863ce72dbea19b63dee7332c41e5e9611e6fab28f78763496c4215156c1e202d67161a06ba09de46d07894267e6c1991637fe15b4c5a379a3cefe99a68d1ea7a7742b6d31bd485366c44138e9e8d63c8e2e6cda5d3938960b04a3962a6163ff94659008fbab6f7baa8f3a5f983606330e3e77a84adca36e5"}], 0x108}}, {{&(0x7f0000002080)=@generic={0x2, "4ea30938c6b8fc344b64052124adff38df8dafbdaeba1ec6cdd5e1ae6ae2c7b87ff8dd6aac42c0b69089057c098c6482c42ec48b046ee75f3d81b0514db9ec163cfd2db284013e2f3ae0539b7942183ef14df2ba6f1cb679ce384e6b88f0abaf29cb62648dab53cdb3ceae3a45460b53ad400405bb9582ed8bfe1ac0e117"}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002100)}, {&(0x7f0000002140)="fa", 0x1}, {&(0x7f0000002180)="071de3b685a0ef73d4ce2700e07b10dd28e6e86c317d50fdb5aa2138024d321434a45471726519e93f44956504c9c3f9", 0x30}, {&(0x7f0000002200)="032984130d37c0af6f778a70cb914569e2ec3960ce005e4bdf46b7e4db8e1c741ab16cf53637a9eecd327fce14fe6c01b9da521e4a4395ba33f1c183fc95d6deeb058ee676157b7601bc02c5e4c7d29b7cd0beb5d69d8547a0e871847b8f0f0e23cd7658aa1c78dde92970d1bc71f1087bbc2c5f8ac18d90ab51d9872ec470edba753299a51ddb2f4a23b79b30a94c7115d7c074a1915ed6174167aa6f1b25db8228edbc66b290e6a8d1bb8d17317c758fa8aa0c494e5304ec77adba6a4d23eca06bdbf901af0d242539bee2082a423ede3f957cb7dc7405d0adfd852a40ab9021b41d2b73f758360a90a2621a7c27db83f4e317f01bf0afcd", 0xf9}, {&(0x7f0000002300)="24e44695b77c3a2bcf1771a71ca2ebf6819bbbf8d7eb5cb054f32122cdde23b26853f58fd524024ecded208bb2f660bd9ee56c624492469274a3503b524c14da1b6e36063da9c3ec861b2d10", 0x4c}], 0x5, &(0x7f0000002400)=[{0x58, 0x109, 0x24d, "59e78aa8987751324bc609205cecdc7f8df9e9003e3287c9b7177370dc0b80a9c1d0a4f47e87a7d7aa674968d6c0bb2e9817e5cb47e385f066602902f1e4466d1833c5ff"}, {0x28, 0x103, 0x101, "d34c8ccbaf913fd3dbba087a6b24604a056e9e916fc69b"}, {0xd0, 0x333fdaa29a3b3180, 0x21, "e657af50222f09be8db37b0b857640935978fc2af47c92aa6a617643ffe7ddd8c5b9eea85fa66a1d2e6675ec835fdab086041886331daf7955a99c029b64bffb5e2a8da10a2a7a30d4d2072a0a2dea10417cd36b80d22cbb92a8221d960554ba8536ab14761476239b14216b2d063ee584cdd993c1e244471ec4893d9f7f280fc0c3a779a3c2ad2ccbb19314fb38a1b534c91f36cf42275446b3e8bce357563adee1331f8527d821ba37bcc645ddc48f5aa6a17b230caaa786fa4ddc419fb8"}, {0x30, 0x108, 0xd3e, "599ae1601dc170f6f5479f186d5a472a1bf9aac798c75a29f203fc010321f7ff"}, {0x28, 0x100, 0x3, "b397e4024a74763f5a0260ce171c69a7b26376"}, {0x28, 0x0, 0x0, "2483bbd5269abcfd9ec321a7eadfca8dd4"}, {0xb8, 0x105, 0x1b3ba667, "3b17961b0d1dad150e46a811760c2dfc94c0313f67fdcd599513af55ce0d1e4bcaf97c042c293df9f840e9ec3514537f5b1300fd8908309778cf1a1b2f946616576032a1886d7bd21eb10d9021bb0d6051cd77d9d35f38ce923a2feba30d56557a24b3ce92c49e73ce3600f1b93d712da10a9380961b756881c6e096c0a92f6db75821d4f4c54246eab326027caafbbdea34c2b6804df8c14c9af01cba2729f1c5"}, {0x50, 0x10d, 0x2e, "b27c2a0ca01011cda491b2b32fb4c3912218cb1321331360e9dd83aff1e9450f3ae388587a14c1efbe178dc41b186abee1aa37797e65d27e72"}], 0x2d8}}], 0x4, 0x4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:50:08 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000040)) r6 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017", 0x24) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6c0000007e01000000550000000000000003030000000400"/35], 0x23) sendto(r6, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x9001) 20:50:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r3, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 20:50:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:50:08 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x1}, 0x8) splice(r3, 0x0, r4, &(0x7f0000000080), 0x400000000003, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880000006847b6c86f7d99d94ee2c458567dfa896574209454dcfafb8b88a273507f073c8ebaae39580efbe9dc8ebd4b19ff86295d0566d5b58d3f82a721f4fd21ee6e9fbb935c6834797238b62501fe1f5000a8d97bb6c293f2393cb500315f9d54c5402e73ac307390166c2d0ac23db98cb141bd0fcda11951f34fd8a8000000805f83a52e9c88", @ANYRES16=r5, @ANYBLOB="00012abd7000fcdbdf25120000007400050014000200080002000000000008000400790300001c00020008000400e6000000080001000a00000008000100030000000c00020008000200030000002c000200080001001a000000080003000000000008000300ff7f0000080004004e00000008000400010000000800010065746800"], 0x88}, 0x1, 0x0, 0x0, 0x4008001}, 0x800) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xe) [ 665.071204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 20:50:09 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000480)=""/259, 0xfffffffffffffff7) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x2}, 0xfffffffffffffde7) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') clock_adjtime(0x4, &(0x7f0000000380)={0x21, 0x800000000000002, 0x95, 0xfffffffffffffffc, 0x8, 0x6, 0x7f, 0x0, 0x3f, 0x9, 0x8e, 0xf4, 0x6, 0x10000, 0x1, 0xff, 0x0, 0xffffffff7fffffff, 0x401, 0x20, 0x7, 0x4647, 0x8, 0x8, 0x9, 0xc7}) sendfile(r3, r4, 0x0, 0x400000000088001) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r6, r7, 0x0, 0x400000000088001) tee(r5, r7, 0x80000001, 0x1) r8 = creat(&(0x7f0000000140)='./bus\x00', 0x40) fcntl$setstatus(r8, 0x4, 0x6100) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) [ 665.349728] input: syz1 as /devices/virtual/input/input37 [ 665.728662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 20:50:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r1) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x4c}, {0x80000006}]}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000040)={0xfff, 0x862, 0xfff}, 0xc) sendmmsg(r5, &(0x7f000000ac80), 0x66, 0x0) 20:50:09 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) getgroups(0x3, &(0x7f00000003c0)=[0xee01, 0xee01, 0x0]) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x0, r2}, {0x2, 0x6, r3}], {0x4, 0x1}, [{0x8, 0x2, 0xee00}, {0x8, 0x1, r4}], {0x10, 0x9}, {0x20, 0x4}}, 0x4c, 0x2) pipe(&(0x7f0000000480)) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0xa) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000500)='tls\x00', 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000540)) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_tables_names\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xab3}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) write$binfmt_elf32(r5, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0xdd, 0xfe, 0xc1, 0x1, 0x1, 0x1e725776527549df, 0x3, 0x9, 0x1c7, 0x38, 0x22a, 0x8, 0xdf, 0x20, 0x1, 0x6, 0x8, 0x15f}, [{0x6, 0x8, 0xfff, 0x5, 0x1, 0x0, 0x8, 0xffff}], "7a512d71a9fe91d27a2e7b9a62a03fd2b7b23ff86d16bd56d93aaadb2f4d54afadf7453bfd3bba89d9b5ede13fca1968a994c1a8b62f6be426349bc7e18f660fa75b579604d0f32089fca0fbb3ec21cf72119dbb5aadcbc261beac2b4cc86d625305a601e82b828bae6dc5795c26e38294f2e7f966f92601d9b91c6529e51528b5fdfff38e929af9b5a648e39b5a4ddb30c031b3f79cea2303ae299fa57d5b5ed07f7dd0fd6cdcc36862ee2fe5a5a70e8484a7b6a257ed0b6145a0cb175116a70ea8df2cae957d056410b26d27ad874beec0f79def85f0da75ac35", [[], [], [], [], [], [], [], [], []]}, 0xa33) r9 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x1, 0x48000) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000001180)=[0x3, 0x3ff]) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000011c0)='/selinux/context\x00', 0x2, 0x0) preadv(r10, &(0x7f0000003640)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/77, 0x4d}, {&(0x7f0000002280)=""/228, 0xe4}, {&(0x7f0000002380)=""/27, 0x1b}, {&(0x7f00000023c0)=""/134, 0x86}, {&(0x7f0000002480)=""/72, 0x48}, {&(0x7f0000002500)=""/13, 0xd}, {&(0x7f0000002540)=""/220, 0xdc}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x9, 0x0) r11 = syz_open_dev$mice(&(0x7f0000003700)='/dev/input/mice\x00', 0x0, 0x20000) write$FUSE_BMAP(r11, &(0x7f0000003740)={0x18, 0x0, 0x7, {0x3}}, 0x18) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000003780)) r12 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000037c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fstat(r12, &(0x7f0000003800)) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000003880)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f00000038c0)=0x1, 0x4) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003900)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003940)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000003a40)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r14, 0x8936, &(0x7f0000003a80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4a, r15}) [ 666.147232] input: syz1 as /devices/virtual/input/input38 [ 666.707131] audit_printk_skb: 21 callbacks suppressed [ 666.712384] audit: type=1400 audit(1575147010.529:1714): avc: denied { create } for pid=18686 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:50:10 executing program 4: open(0x0, 0x0, 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x100) fcntl$getownex(r1, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) socket$inet6(0xa, 0x0, 0x6) pipe(0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="411f1b3932cb7ec46f54ed19577eae500700000000bb386c184f3bcb2b89d31fdcf4468de44fec532ebba87f85c4f8300d11e01c537a00bb66503e502b8d19c602109dc51008a0e3e3a7365951c3e9eddcc5c5b700000000"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3dde20, 0x0) sendfile(r1, r4, 0x0, 0xa5cc554) 20:50:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfff, 0xb4) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x101, 0x96, 0x40, 0x5785}, {0x1, 0x4, 0x73, 0x7}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r3, &(0x7f0000000040)={&(0x7f00000001c0)=@nl=@proc, 0xfffffcff, 0x0, 0x3e1, 0x0, 0xfffffffffffffe63}, 0x12022) 20:50:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/31, 0x1f}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={r3, @empty, @empty}, 0xc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x8}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x92}) 20:50:10 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x100, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) write$eventfd(r1, &(0x7f0000000140)=0x20000100000001, 0x1f) dup2(r1, r0) write$eventfd(r0, &(0x7f0000000140)=0x20000100000001, 0x8) r2 = getgid() stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r3) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r4) stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r5) getgroups(0x3, &(0x7f0000000000)=[0x0, r4, r5]) setresgid(r2, r3, r6) 20:50:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000040)='io\x00') setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x10000000008936, &(0x7f0000000000)) 20:50:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x1ff, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fsync(r3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) r4 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f0000000300)='fdinfo/4\x00') preadv(r7, 0x0, 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x66, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x102, 0x0) fcntl$addseals(r8, 0x409, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGBITSW(r9, 0x80404525, 0x0) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f0000000080)={0x52, 0x5, 0x6, {0x7, 0xf4b}, {0x5, 0x5}, @period={0x5c, 0xb18b, 0x0, 0x1, 0x6, {0x1000, 0xfbb8, 0xfffb, 0x800}, 0x8, &(0x7f0000000000)=[0x0, 0x7fff, 0x44f3, 0x40e5, 0x0, 0x2, 0x401, 0x0]}}) [ 667.617509] keychord: invalid keycode count 0 [ 667.685705] keychord: using input dev AT Translated Set 2 keyboard for fevent 20:50:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe2(0x0, 0x0) pipe(&(0x7f0000000000)) inotify_init1(0x0) write(0xffffffffffffffff, &(0x7f0000000380)="07eb4aaa2a39cbcb2f0b3a8da322e4a9d2559433f3e3ba86945dd806000000b9901570e60cd5f5225e3f849be4cc8d40", 0x30) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xfb) creat(0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$getown(r1, 0x9) fallocate(r2, 0x40, 0x3, 0x6b1) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') open(&(0x7f0000000140)='./file0\x00', 0x54042, 0x84) r6 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r7, 0x4c02, 0x0) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440)="4deadd59dcfe38452d1219c8703b21d038ef7e7ff88da219b92581da92fa2f8abcbe2e17d383467682559f434bb74698dff9ca472ba3283dac933a31e212175549e88471b0186e27f5450408e45e1ffefad68cfead3a4b438f8d0908e0e9873c1c921efb23a0679df8358cc98558", 0x6e, r3}, 0x68) dup2(r8, r0) sendfile(r4, r5, 0x0, 0x80000001) [ 667.829910] keychord: invalid keycode count 0 [ 667.841726] keychord: using input dev AT Translated Set 2 keyboard for fevent 20:50:11 executing program 3: pipe(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x100000000, 0x6, 0x100000000, 0x80000000, 0x6ee4, 0x0, 0x9, 0x0, 0x9, 0x8, 0x75, 0x8}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000300)=0x1) fchdir(r0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000008c0)='\xca\xc2Y\xa2\xda\x10\x98&\x86?\xc4\xddB\x04tB=\x06j\xe8\x02\x1d\xd5\xe6\x9b\xaf\x18\x9e\xb7ct\xc6\xb3PZ\xf2\x01\xe6E\x93{t\xa2\xc4(Mw\x11\xa8x\xb2`|\xcfT\xd0\xbe\v\xd6\xcdt\xdf\xf1^\"/\x98e\xaf$7}1\xc3\x00\x8eM\x18M\x18\x8b.\xdaQ\xd9\x82\x8b\x10\xa1Q\xbbw\xdd\xe8\xd3\x9ff\xc8V@*\xecM\xb0\x9f5l[}\xb8\xf8\x84\xfe\n\xa7\xd9\xf5S') creat(&(0x7f00000004c0)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) accept4$packet(r4, &(0x7f0000000180), &(0x7f0000000280)=0x14, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000301ffff000000000000000000000000a6d9532e5e3da156a06b80c26917ba374f3f66c589e05a5743883d89ad03386b17863f0cc92e01db8491a21b41afed698e8285afd44e"], 0x4a}}, 0x4080000) 20:50:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x2, 0x1e6, [0x200002c0, 0x0, 0x0, 0x200004f4, 0x20000524], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x25e) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x40100, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000004c0)=""/135) [ 668.411356] audit: type=1400 audit(1575147012.229:1715): avc: denied { create } for pid=18723 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:50:12 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r4, r5, 0x0, 0x400000000088001) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000140)={{0x2, 0x4e23, @multicast2}, {0x1, @remote}, 0x20, {0x2, 0x4e21, @multicast2}, 'vlan0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r3, r6, 0x0, 0x400000000088001) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x20002, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000380)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r0, 0x140000) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 20:50:12 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) r0 = getpgrp(0xffffffffffffffff) getxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_access\x00', &(0x7f0000000680)=""/171, 0xab) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x2, &(0x7f0000000140)=""/45) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="f39446abbf29cae51cc98118ccc0553f6ccbba28c06e1e7d559c0030a7d01e582cf5992985d19ef9f245550ace2a6ebb52fa152a617dcb77f6bf235d271f03b97606543f1b9d9f3f294e219bb3a3223113ecc2bd714d732a92366ad68235beb1dcba8a3f94c582aa88"], &(0x7f00000001c0)='./file0\x00', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLOCK(r4, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x1}, 0x8) 20:50:13 executing program 4: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000200)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0xd102}) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x200011b9}], 0x1, 0x0) dup2(r0, r2) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000300)={{0x73, @rand_addr=0x4, 0x4e20, 0x0, 'ovf\x00', 0x4, 0x1000, 0x6e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x5, 0x6, 0x22d3d8bd}}, 0x44) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() tkill(r6, 0x1000000000016) [ 669.476504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket [ 669.657185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket 20:50:13 executing program 5: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f00000001c0)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) clone(0x100c40200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000001c80)='./file0\x00', 0x113d, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = gettid() r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$apparmor_exec(r3, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r4 = gettid() tkill(r4, 0x1000000000016) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 669.725439] audit: type=1400 audit(1575147013.539:1717): avc: denied { create } for pid=18759 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 669.813348] audit: type=1400 audit(1575147013.629:1718): avc: denied { create } for pid=18735 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 20:50:13 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 670.037181] audit: type=1400 audit(1575147013.859:1719): avc: denied { create } for pid=18759 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:50:13 executing program 3: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cc60f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000040)) ptrace$cont(0x7, r2, 0x0, 0x0) 20:50:14 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r2, 0x0, 0x400000000088001) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r3, 0x0, 0x400000000088001) sendmmsg$inet6(r3, &(0x7f0000002ac0), 0x0, 0x4041010) [ 670.398691] [ 670.400375] ====================================================== [ 670.406690] [ INFO: possible circular locking dependency detected ] [ 670.413093] 4.4.174+ #4 Not tainted [ 670.416718] ------------------------------------------------------- [ 670.423124] syz-executor.5/18784 is trying to acquire lock: [ 670.428828] (&pipe->mutex/1){+.+.+.}, at: [] fifo_open+0x15d/0xa00 [ 670.437494] [ 670.437494] but task is already holding lock: [ 670.443461] (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 [ 670.453391] [ 670.453391] which lock already depends on the new lock. [ 670.453391] [ 670.459677] audit: type=1400 audit(1575147014.279:1720): avc: denied { set_context_mgr } for pid=18783 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 670.459717] binder: 18783:18786 ioctl 40046207 0 returned -13 [ 670.462710] binder: 18783:18786 Acquire 1 refcount change on invalid ref 0 ret -22 20:50:14 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 670.462737] binder: 18783:18786 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 670.462754] binder: 18783:18786 Release 1 refcount change on invalid ref 0 ret -22 [ 670.500875] audit: type=1400 audit(1575147014.319:1721): avc: denied { set_context_mgr } for pid=18783 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 670.501580] binder: 18783:18789 ioctl 40046207 0 returned -13 [ 670.501897] binder: 18783:18791 Acquire 1 refcount change on invalid ref 0 ret -22 [ 670.501926] binder: 18783:18791 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 670.501945] binder: 18783:18791 Release 1 refcount change on invalid ref 0 ret -22 [ 670.565530] [ 670.565530] the existing dependency chain (in reverse order) is: [ 670.573149] -> #1 (&sig->cred_guard_mutex){+.+.+.}: [ 670.578874] [] lock_acquire+0x15e/0x450 [ 670.585157] [] mutex_lock_interruptible_nested+0xd2/0xce0 [ 670.593011] [] proc_pid_attr_write+0x1a8/0x2a0 [ 670.599906] [] __vfs_write+0x116/0x3d0 [ 670.606101] [] __kernel_write+0x112/0x370 [ 670.612558] [] write_pipe_buf+0x15d/0x1f0 [ 670.619011] [] __splice_from_pipe+0x37e/0x7a0 [ 670.625819] [] splice_from_pipe+0x108/0x170 [ 670.632457] [] default_file_splice_write+0x3c/0x80 [ 670.639696] [] SyS_splice+0xd71/0x13a0 [ 670.645896] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 670.653138] -> #0 (&pipe->mutex/1){+.+.+.}: [ 670.658407] [] __lock_acquire+0x37d6/0x4f50 [ 670.665051] [] lock_acquire+0x15e/0x450 [ 670.671483] [] mutex_lock_nested+0xc1/0xb80 [ 670.678119] [] fifo_open+0x15d/0xa00 [ 670.684265] [] do_dentry_open+0x38f/0xbd0 [ 670.690729] [] vfs_open+0x10b/0x210 [ 670.696672] [] path_openat+0x136f/0x4470 [ 670.703040] [] do_filp_open+0x1a1/0x270 [ 670.709325] [] do_open_execat+0x10c/0x6e0 [ 670.715780] [] do_execveat_common.isra.0+0x6f6/0x1e90 [ 670.723279] [] SyS_execve+0x42/0x50 [ 670.729216] [] return_from_execve+0x0/0x23 [ 670.735763] [ 670.735763] other info that might help us debug this: [ 670.735763] [ 670.743905] Possible unsafe locking scenario: [ 670.743905] [ 670.749960] CPU0 CPU1 [ 670.754623] ---- ---- [ 670.759286] lock(&sig->cred_guard_mutex); [ 670.763890] lock(&pipe->mutex/1); [ 670.770432] lock([ 670.773896] audit: type=1400 audit(1575147014.589:1722): avc: denied { set_context_mgr } for pid=18795 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 670.773934] binder: 18795:18796 ioctl 40046207 0 returned -13 [ 670.788253] binder: 18795:18796 Acquire 1 refcount change on invalid ref 0 ret -22 [ 670.788281] binder: 18795:18796 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 670.788298] binder: 18795:18796 Release 1 refcount change on invalid ref 0 ret -22 [ 670.826909] &sig->cred_guard_mutex); [ 670.831059] lock(&pipe->mutex/1); [ 670.835075] [ 670.835075] *** DEADLOCK *** [ 670.835075] [ 670.841132] 1 lock held by syz-executor.5/18784: [ 670.845882] #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 [ 670.856349] [ 670.856349] stack backtrace: [ 670.860848] CPU: 0 PID: 18784 Comm: syz-executor.5 Not tainted 4.4.174+ #4 [ 670.867853] 0000000000000000 dfdd2eac0c486de4 ffff88008c7bf530 ffffffff81aad1a1 [ 670.875926] ffffffff84057a80 ffff8801cfdadf00 ffffffff83abd610 ffffffff83ab6500 [ 670.883996] ffffffff83abd610 ffff88008c7bf580 ffffffff813abcda ffff88008c7bf660 [ 670.892057] Call Trace: [ 670.894646] [] dump_stack+0xc1/0x120 [ 670.900014] [] print_circular_bug.cold+0x2f7/0x44e [ 670.906607] [] __lock_acquire+0x37d6/0x4f50 [ 670.912584] [] ? trace_hardirqs_on+0x10/0x10 [ 670.918648] [] ? do_filp_open+0x1a1/0x270 [ 670.924452] [] ? do_execveat_common.isra.0+0x6f6/0x1e90 [ 670.931467] [] ? SyS_execve+0x42/0x50 [ 670.936920] [] ? stub_execve+0x5/0x5 [ 670.942306] [] lock_acquire+0x15e/0x450 [ 670.947944] [] ? fifo_open+0x15d/0xa00 [ 670.953492] [] ? fifo_open+0x15d/0xa00 [ 670.959035] [] mutex_lock_nested+0xc1/0xb80 [ 670.965011] [] ? fifo_open+0x15d/0xa00 [ 670.970554] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 670.977320] [] ? mutex_trylock+0x500/0x500 [ 670.983209] [] ? fifo_open+0x24d/0xa00 [ 670.988754] [] ? fifo_open+0x28c/0xa00 [ 670.994301] [] fifo_open+0x15d/0xa00 [ 670.999680] [] do_dentry_open+0x38f/0xbd0 [ 671.005483] [] ? __inode_permission2+0x9e/0x250 [ 671.011809] [] ? pipe_release+0x250/0x250 [ 671.017613] [] vfs_open+0x10b/0x210 [ 671.022892] [] ? may_open.isra.0+0xe7/0x210 [ 671.028868] [] path_openat+0x136f/0x4470 [ 671.034596] [] ? depot_save_stack+0x1c3/0x5f0 [ 671.040753] [] ? may_open.isra.0+0x210/0x210 [ 671.046812] [] ? kmemdup+0x27/0x60 [ 671.052005] [] ? selinux_cred_prepare+0x43/0xa0 [ 671.058329] [] ? security_prepare_creds+0x83/0xc0 [ 671.064827] [] ? prepare_creds+0x228/0x2b0 [ 671.070719] [] ? prepare_exec_creds+0x12/0xf0 [ 671.076882] [] ? do_execveat_common.isra.0+0x2d6/0x1e90 [ 671.083899] [] ? stub_execve+0x5/0x5 [ 671.089272] [] ? kasan_kmalloc+0xb7/0xd0 [ 671.094989] [] ? kasan_slab_alloc+0xf/0x20 [ 671.100880] [] ? kmem_cache_alloc+0xdc/0x2c0 [ 671.106948] [] ? prepare_creds+0x28/0x2b0 [ 671.112755] [] ? prepare_exec_creds+0x12/0xf0 [ 671.118906] [] do_filp_open+0x1a1/0x270 [ 671.124537] [] ? save_stack_trace+0x26/0x50 [ 671.130513] [] ? user_path_mountpoint_at+0x50/0x50 [ 671.137095] [] ? SyS_execve+0x42/0x50 [ 671.142549] [] ? stub_execve+0x5/0x5 [ 671.147916] [] ? __lock_acquire+0xa4f/0x4f50 [ 671.154010] [] ? trace_hardirqs_on+0x10/0x10 [ 671.155950] audit: type=1400 audit(1575147014.969:1723): avc: denied { set_context_mgr } for pid=18797 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 671.155987] binder: 18797:18799 ioctl 40046207 0 returned -13 [ 671.170054] binder: 18797:18799 Acquire 1 refcount change on invalid ref 0 ret -22 [ 671.170083] binder: 18797:18799 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 671.170116] binder: 18797:18799 Release 1 refcount change on invalid ref 0 ret -22 [ 671.211935] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 671.218789] [] do_open_execat+0x10c/0x6e0 [ 671.224589] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 671.231347] [] ? setup_arg_pages+0x7b0/0x7b0 [ 671.237419] [] ? do_execveat_common.isra.0+0x6b8/0x1e90 [ 671.244437] [] do_execveat_common.isra.0+0x6f6/0x1e90 [ 671.251283] [] ? do_execveat_common.isra.0+0x422/0x1e90 [ 671.258305] [] ? __check_object_size+0x222/0x332 [ 671.264716] [] ? strncpy_from_user+0xd0/0x230 [ 671.270874] [] ? prepare_bprm_creds+0x120/0x120 [ 671.277202] [] ? getname_flags+0x232/0x550 [ 671.283090] [] ? SyS_clock_gettime+0x118/0x1e0 [ 671.289326] [] SyS_execve+0x42/0x50 [ 671.294611] [] stub_execve+0x5/0x5 20:50:14 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:15 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:15 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 671.299804] [] ? tracesys+0x88/0x8d 20:50:15 executing program 0: io_setup(0x5, &(0x7f0000000180)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x96ab81f542d9159}) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 20:50:15 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000110) syz_genetlink_get_family_id$tipc(0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0xa0000011}) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x2bb, 0xfffffffffffffffb) r3 = dup(r1) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x3d, 0x6, 0x6, 0xf9, 0x0, 0x4, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x75d, 0x6, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x1, 0x400, 0x4, 0x8, 0x400, 0x3}, r3, 0x10, r1, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) close(r0) epoll_create(0x0) [ 671.708744] binder: 18812:18814 ioctl 40046207 0 returned -13 [ 671.745424] binder: 18812:18814 Acquire 1 refcount change on invalid ref 0 ret -22 [ 671.759863] binder: 18813:18815 ioctl 40046207 0 returned -13 [ 671.773331] binder: 18812:18814 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 671.786398] binder: 18813:18815 Acquire 1 refcount change on invalid ref 0 ret -22 [ 671.802189] binder: 18813:18815 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 671.810238] binder: 18812:18814 Release 1 refcount change on invalid ref 0 ret -22 [ 671.839480] binder: 18813:18815 Release 1 refcount change on invalid ref 0 ret -22 20:50:15 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:15 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 672.232654] binder: 18831:18833 Acquire 1 refcount change on invalid ref 0 ret -22 [ 672.258956] binder: 18831:18833 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 672.274696] binder: 18831:18833 Release 1 refcount change on invalid ref 0 ret -22 [ 672.308005] binder: 18830:18832 ioctl 40046207 0 returned -13 [ 672.323490] binder: 18830:18832 Acquire 1 refcount change on invalid ref 0 ret -22 [ 672.332220] binder: 18830:18832 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 672.340609] binder: 18830:18832 Release 1 refcount change on invalid ref 0 ret -22 20:50:17 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:17 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:17 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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"/3210], 0xffffff65) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r5) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d053d7}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r9 = socket$inet6(0xa, 0x801, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup(r9) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x19) sendto$inet6(r9, 0x0, 0x0, 0x24000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:50:17 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'veth0\x00', 0x201a}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x3ffe, 0x4) sendto$inet6(r1, 0x0, 0xffffffffffffffad, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr="ffd6f1b9201348544de96b337da295b8"}, 0x1c) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)=0x1) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000080)={@mcast2, r2}, 0x14) close(r0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2cb04368b9fce6f1cd80"], 0xa}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x2) tkill(r4, 0x4) ptrace$setregs(0xd, r4, 0x1000, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 20:50:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x4, {{0xa, 0x0, 0x80000001, @mcast2}}, {{0xa, 0x0, 0x0, @remote, 0xfffffffc}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x2d, 0x18, 0x14, 0x11, 0x9, 0xfff, 0x1, 0x49}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ptmx\x00', 0x400, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x16) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) r10 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r10, 0x0, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x81}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xffffffffffffff1e}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x884}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @remote, 0x7c9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r7, &(0x7f000000ac80), 0x66, 0x0) 20:50:17 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:17 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 673.587179] audit_printk_skb: 12 callbacks suppressed [ 673.617512] audit: type=1400 audit(1575147017.399:1728): avc: denied { create } for pid=18841 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:50:17 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 673.672589] binder: 18838:18839 Acquire 1 refcount change on invalid ref 0 ret -22 [ 673.697218] binder: 18838:18839 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 673.725979] binder: 18838:18839 Release 1 refcount change on invalid ref 0 ret -22 20:50:17 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 673.761624] audit: type=1400 audit(1575147017.579:1729): avc: denied { set_context_mgr } for pid=18842 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 673.803450] binder: 18842:18846 ioctl 40046207 0 returned -13 20:50:17 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) [ 673.830164] binder: 18842:18846 Acquire 1 refcount change on invalid ref 0 ret -22 [ 673.838557] binder: 18842:18846 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 673.852724] binder: 18842:18846 Release 1 refcount change on invalid ref 0 ret -22 [ 674.003110] audit: type=1400 audit(1575147017.819:1730): avc: denied { create } for pid=18841 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 20:50:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x4, {{0xa, 0x0, 0x80000001, @mcast2}}, {{0xa, 0x0, 0x0, @remote, 0xfffffffc}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x2d, 0x18, 0x14, 0x11, 0x9, 0xfff, 0x1, 0x49}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ptmx\x00', 0x400, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x16) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) r10 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r10, 0x0, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x81}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xffffffffffffff1e}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x884}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @remote, 0x7c9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r7, &(0x7f000000ac80), 0x66, 0x0) 20:50:17 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 674.298595] audit: type=1400 audit(1575147018.119:1731): avc: denied { set_context_mgr } for pid=18865 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 20:50:18 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 674.406885] binder: 18864:18867 Acquire 1 refcount change on invalid ref 0 ret -22 [ 674.414671] binder: 18864:18867 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 674.438301] binder: 18865:18868 ioctl 40046207 0 returned -13 20:50:18 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 674.478086] binder: 18864:18867 Release 1 refcount change on invalid ref 0 ret -22 [ 674.552106] binder: 18871:18879 Acquire 1 refcount change on invalid ref 0 ret -22 [ 674.590523] binder: 18871:18879 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 20:50:18 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24006098, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r5 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}, @icmp=@timestamp_reply={0xffffff83, 0xa, 0x0, 0x0, 0x0, 0x8906}}}}}, &(0x7f0000000040)) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xf, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x44) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) geteuid() quotactl(0x0, 0x0, 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 674.638762] audit: type=1400 audit(1575147018.459:1732): avc: denied { create } for pid=18870 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 674.669827] binder: 18871:18879 Release 1 refcount change on invalid ref 0 ret -22 [ 675.032375] binder: 18882:18885 Acquire 1 refcount change on invalid ref 0 ret -22 [ 675.040731] binder: 18882:18885 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 675.066367] binder: 18882:18885 Release 1 refcount change on invalid ref 0 ret -22 20:50:20 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 20:50:20 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x80042, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4cf, 0x133e66ac38fa4627) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1b4011, r0, 0x0) 20:50:20 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:20 executing program 0: socket(0x2, 0x2, 0xfa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = open(0x0, 0x40000, 0x0) fchdir(r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x50000, 0x0) ioctl(r0, 0xebd6, &(0x7f0000000380)="8828") ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TIOCCBRK(r2, 0x5428) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$TCFLSH(r4, 0x540b, 0xfffffffffffffffd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1, 0xf65}, 0xb) write(r6, &(0x7f00000001c0), 0xfffffef3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x8000009, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, 0xff) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r7, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r8, 0x541c, &(0x7f00000003c0)={0x5, 0x5db5200e, 0x6, 0x4}) accept$unix(r8, &(0x7f00000005c0), &(0x7f0000000680)=0x6e) r9 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x40400, 0x0, 0x3, 0x3, 0x0, 0x3}, 0x20) 20:50:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x4, {{0xa, 0x0, 0x80000001, @mcast2}}, {{0xa, 0x0, 0x0, @remote, 0xfffffffc}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x2d, 0x18, 0x14, 0x11, 0x9, 0xfff, 0x1, 0x49}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ptmx\x00', 0x400, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x16) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) r10 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r10, 0x0, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x81}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xffffffffffffff1e}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x884}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @remote, 0x7c9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r7, &(0x7f000000ac80), 0x66, 0x0) 20:50:20 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:20 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:20 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 676.762752] binder: 18894:18898 Acquire 1 refcount change on invalid ref 0 ret -22 [ 676.830645] binder: 18894:18898 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 20:50:20 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x80042, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4cf, 0x133e66ac38fa4627) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1b4011, r0, 0x0) [ 676.862099] audit: type=1400 audit(1575147020.679:1733): avc: denied { create } for pid=18893 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 676.913309] binder: 18894:18898 Release 1 refcount change on invalid ref 0 ret -22 20:50:20 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:21 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x80042, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4cf, 0x133e66ac38fa4627) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1b4011, r0, 0x0) 20:50:21 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) 20:50:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x4, {{0xa, 0x0, 0x80000001, @mcast2}}, {{0xa, 0x0, 0x0, @remote, 0xfffffffc}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x2d, 0x18, 0x14, 0x11, 0x9, 0xfff, 0x1, 0x49}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ptmx\x00', 0x400, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x16) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) r10 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r10, 0x0, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x81}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xffffffffffffff1e}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x884}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @remote, 0x7c9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r7, &(0x7f000000ac80), 0x66, 0x0) [ 677.400252] binder: 18921:18922 Acquire 1 refcount change on invalid ref 0 ret -22 [ 677.452301] binder: 18921:18922 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 20:50:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x80042, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4cf, 0x133e66ac38fa4627) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1b4011, r0, 0x0) [ 677.531393] binder: 18921:18922 Release 1 refcount change on invalid ref 0 ret -22 20:50:21 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) socket$inet6(0xa, 0x100800000000002, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:21 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r3, 0x0, 0x400000000088001) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 677.663963] audit: type=1400 audit(1575147021.479:1734): avc: denied { set_context_mgr } for pid=18924 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 677.764067] binder: 18924:18934 ioctl 40046207 0 returned -13 [ 677.920302] audit: type=1400 audit(1575147021.739:1735): avc: denied { create } for pid=18938 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 678.064943] binder: 18942:18946 Acquire 1 refcount change on invalid ref 0 ret -22 [ 678.072969] binder: 18944:18947 Acquire 1 refcount change on invalid ref 0 ret -22 [ 678.102965] binder: 18944:18947 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 20:50:21 executing program 0: socket(0x2, 0x2, 0xfa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = open(0x0, 0x40000, 0x0) fchdir(r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x50000, 0x0) ioctl(r0, 0xebd6, &(0x7f0000000380)="8828") ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TIOCCBRK(r2, 0x5428) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$TCFLSH(r4, 0x540b, 0xfffffffffffffffd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1, 0xf65}, 0xb) write(r6, &(0x7f00000001c0), 0xfffffef3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x8000009, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, 0xff) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_type(r7, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r8, 0x541c, &(0x7f00000003c0)={0x5, 0x5db5200e, 0x6, 0x4}) accept$unix(r8, &(0x7f00000005c0), &(0x7f0000000680)=0x6e) r9 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x40400, 0x0, 0x3, 0x3, 0x0, 0x3}, 0x20) 20:50:21 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 20:50:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x80042, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4cf, 0x133e66ac38fa4627) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) 20:50:21 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) [ 678.124917] binder: 18942:18946 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 678.129216] binder: 18944:18947 Release 1 refcount change on invalid ref 0 ret -22 [ 678.217392] binder: 18942:18946 Release 1 refcount change on invalid ref 0 ret -22 20:50:22 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x28, 0x8, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @request_death, @release], 0x0, 0x70f000, 0x0}) 20:50:22 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x80042, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4cf, 0x133e66ac38fa4627) [ 678.325660] audit: type=1400 audit(1575147022.139:1736): avc: denied { set_context_mgr } for pid=18949 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 20:50:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x4, {{0xa, 0x0, 0x80000001, @mcast2}}, {{0xa, 0x0, 0x0, @remote, 0xfffffffc}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x2d, 0x18, 0x14, 0x11, 0x9, 0xfff, 0x1, 0x49}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6(0xa, 0x100800000000002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ptmx\x00', 0x400, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x16) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r8, r9, 0x0, 0x400000000088001) r10 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r10, 0x0, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x81}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xffffffffffffff1e}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x884}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @remote, 0x7c9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) [ 678.431350] binder: 18953:18954 Acquire 1 refcount change on invalid ref 0 ret -22 [ 678.448569] binder: 18949:18951 ioctl 40046207 0 returned -13 20:50:22 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r2 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) [ 678.485698] binder: 18953:18954 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 20:50:22 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x80042, 0x0) [ 678.559780] binder: 18953:18954 Release 1 refcount change on invalid ref 0 ret -22 20:50:22 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r0, r1, 0x0, 0x400000000088001) connect(r0, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb,