Warning: Permanently added '10.128.0.113' (ECDSA) to the list of known hosts. 2019/11/06 00:33:12 fuzzer started 2019/11/06 00:33:14 dialing manager at 10.128.0.26:44401 2019/11/06 00:33:14 syscalls: 1402 2019/11/06 00:33:14 code coverage: enabled 2019/11/06 00:33:14 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/11/06 00:33:14 extra coverage: extra coverage is not supported by the kernel 2019/11/06 00:33:14 setuid sandbox: enabled 2019/11/06 00:33:14 namespace sandbox: enabled 2019/11/06 00:33:14 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/06 00:33:14 fault injection: kernel does not have systematic fault injection support 2019/11/06 00:33:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/06 00:33:14 net packet injection: enabled 2019/11/06 00:33:14 net device setup: enabled 2019/11/06 00:33:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/06 00:33:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 00:34:16 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80840c10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}}, 0x8) open$dir(&(0x7f00000001c0)='./file0\x00', 0x101000, 0xb) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x73, 0x1, {{0x96, 0x1}, 0x5c0c}}, 0x18) prctl$PR_MCE_KILL(0x21, 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r3, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x558f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r4, &(0x7f0000000440)=0x10001, 0x678) unshare(0x4000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='map_files\x00') ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f00000004c0)=0x10000) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000500)={0x6, {{0x2, 0x4e24, @remote}}}, 0x88) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80000) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000600)={0x7c, @broadcast, 0x4e24, 0x1, 'lblcr\x00', 0x9, 0x8d, 0x52}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000640)={{0xffffffffffffffff, 0x1, 0xe6, 0x0, 0x5}}) sendmsg$inet6(r0, &(0x7f0000001c80)={&(0x7f0000000680)={0xa, 0x4e22, 0x8, @ipv4={[], [], @remote}, 0x1}, 0x1c, &(0x7f0000000a80)=[{&(0x7f00000006c0)}, {&(0x7f0000000700)="ed5647e96cc10432cd0bc0bee1d737f5250937eb2499f3ec67297fe6da62bca9eb50f114e9b621911c70d6b0c21e56f3d05867607b3007792b2d6d62768594881ecc9f67742b774d8a9ad38138eb55c6c1b9f944bfd0d28921739a18a99a865e399a2114a3bca32c635415d720511330ca55f42033b13038638ca596ba176a35cf9afffe9146320f82b0eaeecd09f641bcaeb2fa15e7c858d2f40b7d001cba0cc0118d685e35fe14d6c5265df0f0ecd2bd0973a4bacd18e93201991115c6bbc9aeb0827382fdb272d66e0b2b", 0xcc}, {&(0x7f0000000800)="62d372406b26266334d9697a534a1abe1da6b08d7722ffa0eb07c8be6c88d7f1cc6d02bb1e6bb698f5d6f58936f1dc9de592be775437f5e09cd8dadd57d84fbaf1125cf5e36fc7b11caed0b8a3bc04d26df4d693bf0317dc15bc5b07d77482ff", 0x60}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="c1cb5581607442106980723b3be1fb99417c72b25d7c40063d06c4dd99beb12f7b1d9fcc39137e7dd0c427b0f7f660d201a4ac2f8c4fb33d0d43f3998a21a902b325228b2da84122671c166597d4f7620ddfa709d5b6bc2a9be2330020edb6df4d91b24963e04c0e5611f6a8549cb97268787738847c4e0d106fc97430ef9a351262e1641dc8531ba937f95dc8b2ad97d69ca410f4934cc702b5f3c30156d73d315f0b76deda3557bb9db7be7f7815121a83cf16a2349c780776f818aee3d15df02e2899e1f1155fcfbc7f13be25fd2bd2cfbfdc5afaa297bac257c75538f3918cb0db042a0cef62", 0xe8}, {&(0x7f00000009c0)="8591a5086c40c1a27f41538b4d725e4be0792f4dc337d97d528e66d2309956ba076a34b3b2f2baad471ff0656b3d351aa197f43734f7459e598f7803d4420af31b24822b7233aeeaab8df8f556b4c6ea30e7e21afac6ed0bd6af732916f9b72f438a9f0b5f2345429261de6a60795bec6eccf74f2769870bd4", 0x79}, {&(0x7f0000000a40)="42bf2400009f8762e2579a1c4c1ce41937631cd2b0a2995c8944f299ebd39c25e8946fa86496449356d83ec5", 0x2c}], 0x7, &(0x7f0000000b00)=[@rthdr={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x4, 0x9, 0x0, [@loopback, @loopback]}}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x2b, 0x10, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xce}, @calipso={0x7, 0x48, {0x6, 0x10, 0x0, 0x8, [0x3, 0x31, 0x18, 0xfffffffffffff801, 0x5, 0x1, 0x80000000, 0x2]}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dstopts_2292={{0x1030, 0x29, 0x4, {0x3a, 0x202, [], [@generic={0x7, 0x1000, "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"}, @hao={0xc9, 0x10, @ipv4={[], [], @empty}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x4, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xfffe}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}], 0x1170}, 0x8904) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x68, r1, 0x0, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x7b4, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000001e00)) accept4$inet(r2, &(0x7f0000001e40)={0x2, 0x0, @dev}, &(0x7f0000001e80)=0x10, 0x800) ioctl$KDSETLED(r2, 0x4b32, 0x7ff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x10000}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x4040000) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001fc0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x711) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000002280)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)={0xf0, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x184}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @loopback, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x480000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) 00:34:16 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) r1 = eventfd2(0x5, 0x0) write(r1, &(0x7f0000000080)="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", 0xfc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r2, 0x8000, 0x10}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240), 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x3) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000003c0)=@gcm_128={{0x304}, "3d9431dc0655ff71", "c2199710d930b070f0b35868a0fa5d3d", "39174e7f", "54cf022664453270"}, 0x28) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)=""/92, &(0x7f0000000480)=0x5c) r6 = socket$netlink(0x10, 0x3, 0x6) fsync(r6) openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self\x00', 0x82000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) pause() r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x1, 0x0) ioctl$TIOCSTI(r7, 0x5412, 0x1fd) r8 = creat(&(0x7f0000000580)='./file0\x00', 0x30) connect$unix(r8, &(0x7f00000005c0)=@file={0x2, './file0\x00'}, 0x6e) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x100, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20400001}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=@newqdisc={0xc0, 0x24, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x10, 0xe}, {0x10, 0x1}, {0xa, 0x1fffa}}, [@TCA_RATE={0x8, 0x5, {0x0, 0x7}}, @qdisc_kind_options=@q_rr={{0x8, 0x1, 'rr\x00'}, {0x18, 0x2, {0x6, "c64e06880c1f24305cef9a654d9db2"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_RATE={0x8, 0x5, {0xb1, 0x8}}, @TCA_STAB={0x60, 0x8, [{{0x1c, 0x1, {0x0, 0x1, 0x1, 0x4, 0x3, 0x1000, 0x0, 0x4}}, {0xc, 0x2, [0x9, 0x9, 0x200, 0xf22]}}, {{0x1c, 0x1, {0x5, 0x4, 0x3, 0x4, 0x0, 0xffff, 0x101, 0x9}}, {0x18, 0x2, [0xfffc, 0x1, 0x2, 0x8, 0x2, 0x0, 0x4, 0x2, 0x1000]}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) write$P9_RSTATu(r5, &(0x7f0000000900)={0x8b, 0x7d, 0x1, {{0x0, 0x6c, 0xd5, 0x5, {0xc0, 0x3, 0x5}, 0x1000000, 0x2, 0x1, 0x9, 0x5, 'eth1(', 0x2b, ':+posix_acl_access(cgroup}posix_acl_access\'', 0x9, 'em1\\\x84em0&'}, 0xa, '/dev/null\x00', r11}}, 0x8b) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ftruncate(r12, 0x3) 00:34:16 executing program 2: times(&(0x7f0000000000)) write$9p(0xffffffffffffffff, &(0x7f0000000040)="f174486f707f3d4c5dc2bbef9c5f4665aefd4bc495090c3dbf5e62e8cc1809457a8ff5d26b82ad57f4d1551134e1b64cdd75a5ac31a14b6f114a1715f1f26e68d89baa5202c643d5ef26262589568dce0c90356bc9a9489e76e01ed8ec581cf921a44f9192d7632b5d39989a831a977803ebe92ddf26fba6348f2cc488e9e251d154672268745843b5a4ce0cfdd57b59b26bd1637af9da6734acf3cae5469c24c6031d2b708d30a7852d8a8c826aff71dcabec8c", 0xb4) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20000, 0x82) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4001) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)=0x800) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x400, 0x0) getsockname$unix(r3, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000580)=0x10) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self\x00', 0x60200, 0x0) read(r4, &(0x7f0000000600)=""/218, 0xda) fallocate(r3, 0x0, 0x2, 0x13) getsockname$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000740)=0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000780)) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000007c0)={@multicast2, @dev}, &(0x7f0000000800)=0x8) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r5 = add_key$keyring(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$assume_authority(0x10, r5) r6 = signalfd(0xffffffffffffffff, &(0x7f00000008c0)={0x7}, 0x8) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000900)={0x8, 0x7fff, 0x40, 0x9, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)={0x15, 0x3, 0x6, 0x80000000, 0x616, r0, 0x401, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) r8 = geteuid() r9 = getegid() fchown(r7, r8, r9) prctl$PR_GET_THP_DISABLE(0x2a) fsetxattr$security_selinux(r2, &(0x7f0000000980)='security.selinux\x00', &(0x7f00000009c0)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0xe583a228a8581667) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa0, r10, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x334}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x69d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x55e2b17}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x18001}, 0x44005) 00:34:16 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x810000, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x9, 0xcaf6, 0x9, 0x5}, 0x10) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8000) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x8003) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0x3, 0x2, 0x20, 0x400}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIBMAP(r4, 0x1, &(0x7f00000001c0)) r5 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x53aef68ca1497018}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b0, 0xb, 0x1, 0x0, 0x70bd2c, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x20, 0x3a, @str='/selinux/avc/cache_stats\x00'}, @nested={0x17c, 0x8f, [@generic="75c2d5cb4a4447ed38732c1f1b5921b9332fa71bf4a3e6b965157f364806b4ca096e6f3471822c0867c184f4cd95ac2f322ea622bbbf884934a751fbb74f2a3b58bf8137d31469dcfceed2ebcbdd078da8212a29f4512a61555cc417520bffff073b7e4079277fabb3457694adf653bee550cdfd476bc26dcc223407d0d4b0d3896e0cf21cae57bf9d8ba62447845118d24217f52ebb82ec30ca156bad0ac8da6354031174ec8ae68f1bcadbed3e5cbe8715097537793cbbfbbbc22a82419b458550dd8615d58aa6eb6b50d6648d1c0425dc9fa47fbc78f5f1c4e8a7a33f543b5c8e10c3eb01baa3991984ad93", @typed={0x8, 0x3d, @pid=r5}, @typed={0x8, 0x63, @uid=r6}, @generic="6c86ada18621faf89d08f760d43eafc9fc248e97248f6f6cbd529f61a4b801f1cae1439977cec9b121b4eca74fe51dde5e95d09e2ce19945b7bff2640dac19bd83906604fb46cd14f9297078f04358b8179e4d45a82e2b143a0f5a021da128109705dc0fe8c095add28d242a5e89d4c2e783dce049988e2b8c"]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4004901}, 0x40000) r7 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x30000) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) utimensat(r7, &(0x7f0000000600)='./file0\x00', &(0x7f0000000680)={{r8, r9/1000+10000}, {0x77359400}}, 0x100) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000700)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$dupfd(r10, 0x203, r3) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCGNPMODE(r11, 0xc008744c, &(0x7f0000000780)={0xc223, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x6, &(0x7f0000000800)={0x2, &(0x7f00000007c0)=[{0x1, 0x6, 0xc6, 0x2}, {0x19ec, 0x1f, 0x4, 0x5}]}) r12 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000840)) setsockopt$inet6_MRT6_ADD_MIF(r12, 0x29, 0xca, &(0x7f0000000880)={0xc7, 0x3, 0xf9, 0x8001, 0x7f}, 0xc) r13 = creat(&(0x7f00000008c0)='./file0\x00', 0x48) write$selinux_create(r13, &(0x7f0000000900)=@objname={'system_u:object_r:usbmon_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x9, 0x20, './file0\x00'}, 0x70) accept$inet6(0xffffffffffffffff, &(0x7f0000000980)={0xa, 0x0, 0x0, @empty}, &(0x7f00000009c0)=0x1c) mkdir(&(0x7f0000000a00)='./file0\x00', 0xb0) r14 = accept4$inet(r12, &(0x7f0000000a40)={0x2, 0x0, @multicast2}, &(0x7f0000000a80)=0x10, 0x0) ioctl$LOOP_SET_FD(r13, 0x4c00, r14) 00:34:16 executing program 3: lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x4, 0x5}, {0x6d, 0x4c}]}, 0x14, 0x2) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = eventfd(0x20) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) fcntl$setown(r2, 0x8, r3) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x13}, @alu={0x7, 0x1, 0x9, 0x2, 0x3, 0xfffffffffffffffc, 0x8}], &(0x7f0000000200)='GPL\x00', 0xffffffc0, 0x0, 0x0, 0x40f00, 0x4, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x0, 0x74}, 0x10}, 0x70) ftruncate(r5, 0x2) fcntl$setsig(r4, 0xa, 0x11) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x7) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x9, 0x2000) sendfile(r6, r7, 0x0, 0x4) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @loopback}, &(0x7f0000000480)=0x10) fsetxattr$trusted_overlay_origin(r8, &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='trusted.overlay.opaque\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r9, 0x4, 0x1000) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/member\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000700)=@hci, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000840)=""/36, 0x24}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/35, 0x23}], 0x4, &(0x7f0000001900)=""/19, 0x13}, 0xa8c}, {{&(0x7f0000001940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/255, 0xff}], 0x1, &(0x7f0000001b00)=""/4096, 0x1000}, 0x400}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002b00)=""/210, 0xd2}], 0x1, &(0x7f0000002c40)=""/249, 0xf9}, 0x2}, {{&(0x7f0000002d40)=@nfc, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002dc0)=""/239, 0xef}, {&(0x7f0000002ec0)=""/113, 0x71}, {&(0x7f0000002f40)=""/58, 0x3a}], 0x3, &(0x7f0000002fc0)=""/128, 0x80}, 0x1f}], 0x4, 0x1, 0x0) recvfrom$packet(r6, &(0x7f0000000640)=""/137, 0x89, 0x40000000, &(0x7f0000003140)={0x11, 0xf7, r10, 0x1, 0x0, 0x6, @random="6ec9a2624b57"}, 0x14) r11 = openat(r0, &(0x7f0000003180)='./file0\x00', 0x4000, 0x7) ioctl$KDGKBMODE(r11, 0x4b44, &(0x7f00000031c0)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000003200)={0x6, 0x7, 0x20, 0x2, 0x9, 0xec, 0x9, 0x2, 0x5, 0x20}) syz_genetlink_get_family_id$nbd(&(0x7f0000003240)='nbd\x00') r12 = socket$inet(0x2, 0x80000, 0x1) lseek(r12, 0x7ff, 0xc0f719f9a4c5c234) 00:34:16 executing program 4: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:policy_config_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x3f}, 0x49) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x242441, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000002380)={0x0, @initdev, @broadcast}, &(0x7f00000023c0)=0xc) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000002400)=r4) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002440)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0xe09, 0xffffffffffffffff) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x8) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002480)='/selinux/policy\x00', 0x0, 0x0) getdents(r7, &(0x7f00000024c0)=""/185, 0xb9) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000002680)={0x18, 0x0, &(0x7f00000025c0)=[@decrefs={0x40046307, 0x1}, @exit_looper, @dead_binder_done], 0x73, 0x0, &(0x7f0000002600)="ae3e511f512db54a609b1dce0df649745d7e0f19be33647d25ec620c9780b1ebeb8161d6c442b0295a049d18babcff651feda66cb90c564318241b7385c868e5fe0a3544995de1a8d4f7684786ae28981a0426e9fbd02af322c983726d4c1ab71dcfcbd6743d77e6ab368c500fc78c362cff77"}) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f00000026c0)) pipe(&(0x7f0000002700)={0xffffffffffffffff}) accept(r2, &(0x7f0000002740)=@nfc, &(0x7f00000027c0)=0x80) r10 = accept(0xffffffffffffffff, &(0x7f0000002800), &(0x7f0000002880)=0x80) setsockopt$inet6_tcp_buf(r10, 0x6, 0x21, &(0x7f00000028c0)="c03487588ced443a45f98dd23e3a8620002e850673646bbbd920781f5683dc102e2f8c74f2a036ba1ab3d76cd9b50f38b98769f010a78198a22f205c0238f7d8f1421a878efd38e568014bc06f1806bf2f879ef15c61bd66095d87aa8d60201ea807f81caece163c6891b01ce25f42bde8b9e3205d9164845f09b62d147b0386d6ba97bc555c65c0c9e1a56641b80e1ef7b708ad0823c5c341750042a26ffc3ee94cd998580567f57d40046a0d36c3c8", 0xb0) openat$cgroup_type(r9, &(0x7f0000002980)='cgroup.type\x00', 0x2, 0x0) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000029c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000002b00)={0x18, 0x0, &(0x7f0000002a00)=[@release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xbc, 0x0, &(0x7f0000002a40)="ee1fc6069a650611986de81b74d23390a88a8d3ab92e9352c9cb6a5198226ac422fa43cfe5647ddaee102f48c1436c76e88790a79ad8fe899650ffef63fc178e5b69426d39409bf5fc42491eb671444eddec318b1451b800058396be0fd85df44b0cdcd9618306dbbcd4f6d6f478f3b8fd2b24b11ec0080e3b57dc287bdac5a42dc24918f3e46d0f915ad9c54a33396ecbec5e306f1bb77c8230fee6edb0219093d5eb625e340a9b10c712baaadb7fd87cfbe65e793775573aac7698"}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/full\x00', 0x0, 0x0) ioctl$BLKRAGET(r12, 0x1263, &(0x7f0000002b80)) r13 = accept$inet6(0xffffffffffffffff, &(0x7f0000002bc0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002c00)=0x1c) sendmmsg$sock(r13, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c40)="4a6b052d2674aba5656fda763a1756a8fbcc6a1d53a7f53809f11583f5da992d9fdbcd5906d98306ff85f4b80427f571b8ea58ab1c0f55a29e2d9e880e64c73241f7612d6980f1f77e7e82", 0x4b}], 0x1}}], 0x1, 0x4) [ 88.299054] audit: type=1400 audit(1573000458.341:5): avc: denied { associate } for pid=2116 comm="syz-executor.5" name="syz5" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 88.415741] audit: type=1400 audit(1573000458.461:7): avc: denied { getattr } for pid=3007 comm="syz-executor.5" path="socket:[7833]" dev="sockfs" ino=7833 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:34:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x3, 0x7, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xd6c}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000001c0)={0x4, &(0x7f0000001440)=[{0x0, 0x0, 0x6}, {0x0, 0x0, 0x2, 0x3}, {0x0, 0x7}, {0x5, 0x4, 0x1}]}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pidfd_open(0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00000002c0)=0x4a5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) pipe2(0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r5, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r6, &(0x7f0000000800)="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", 0x400) sendfile(r6, r7, 0x0, 0x10000) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000001340)={{{@in=@multicast1, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000140)=0x33) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r10, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="f1e9e7540932b5917545840100"]) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000002c0)={'teql0\x00', 0x4000003}) 00:34:18 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r4, 0x0, r6, 0x0, 0x80000000, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) r11 = dup3(r10, r9, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r11, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x54000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0xc8, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00\b\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xc8}}, 0x24040000) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}}, 0x8010004) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r8, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8002003) r12 = gettid() tkill(r12, 0x16) [ 88.447918] audit: type=1400 audit(1573000458.451:6): avc: denied { create } for pid=3012 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:34:18 executing program 0: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000480)={0x1, 0x0, [0x0]}) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c28b693fecb4cef, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="a60000002901000200000010020000000600000000000000c5f20000000000000307002e2f66696c65305401000000060000000000000000010000000000000507002e2f66696c653036000000000300000000000000ff0f0000000000004507002e2f66696c6530020100000000000000000000000300000000000000fd07002e2f66696c65300001000000060000000000000000000000000000000707002e2f66696c6530"], 0xa6) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x100000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f00000001c0)='./file0\x00', r2}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x6cd0dcdfc9f7cfc8}, 0xc, 0x0}, 0x400) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) fsetxattr$security_capability(r1, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000440)=@v3={0x3000000, [{0x8001}, {0x1, 0x3}], r5}, 0x18, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x100000) [ 88.448407] audit: type=1400 audit(1573000458.491:8): avc: denied { write } for pid=3012 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 88.466416] audit: type=1400 audit(1573000458.511:9): avc: denied { read } for pid=3012 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 88.473275] audit: type=1400 audit(1573000458.511:10): avc: denied { write } for pid=3013 comm="syz-executor.1" name="net" dev="proc" ino=7843 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 88.473743] audit: type=1400 audit(1573000458.511:11): avc: denied { add_name } for pid=3013 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 88.475157] audit: type=1400 audit(1573000458.521:12): avc: denied { create } for pid=3013 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 00:34:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) memfd_create(&(0x7f0000000000)='/dev/uinput\x00', 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000f99000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 88.525067] audit: type=1400 audit(1573000458.551:13): avc: denied { create } for pid=3033 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 88.532031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3036 comm=syz-executor.0 00:34:18 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8eb409b3cfa77f8e, 0x400002172, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000, 0x0, &(0x7f00005a9000/0x3000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/49) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) lstat(&(0x7f0000000440)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./bus\x00', 0x0, r1, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', &(0x7f0000000300)='ocfs2\x00', 0x2000, &(0x7f0000000340)='^\x00') io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 88.640479] audit: type=1400 audit(1573000458.671:14): avc: denied { write } for pid=3059 comm="syz-executor.4" path="socket:[8277]" dev="sockfs" ino=8277 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 88.646682] hrtimer: interrupt took 51261 ns 00:34:18 executing program 0: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000480)={0x1, 0x0, [0x0]}) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c28b693fecb4cef, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="a60000002901000200000010020000000600000000000000c5f20000000000000307002e2f66696c65305401000000060000000000000000010000000000000507002e2f66696c653036000000000300000000000000ff0f0000000000004507002e2f66696c6530020100000000000000000000000300000000000000fd07002e2f66696c65300001000000060000000000000000000000000000000707002e2f66696c6530"], 0xa6) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x100000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f00000001c0)='./file0\x00', r2}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x6cd0dcdfc9f7cfc8}, 0xc, 0x0}, 0x400) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) fsetxattr$security_capability(r1, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000440)=@v3={0x3000000, [{0x8001}, {0x1, 0x3}], r5}, 0x18, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x100000) 00:34:18 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r3, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d8", 0x400) sendfile(r3, r4, 0x0, 0x10000) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000501f5"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x3) r8 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r9 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r8, &(0x7f0000000800)="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", 0x400) sendfile(r8, r9, 0x0, 0x10000) write$FUSE_INTERRUPT(r8, &(0x7f0000000080)={0x10, 0xfffffffffffffff5, 0x6}, 0x10) [ 88.874318] syz-executor.0 (3073) used greatest stack depth: 24168 bytes left 00:34:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) dup3(0xffffffffffffffff, r1, 0x40000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x28}}, 0x0) 00:34:19 executing program 0: sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x368114239326d0fe, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @remote}, 0xfffffe1d) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffc0}, 0x100) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000280)={0x10000, 0x4, 0x80000001, 0x0, 0x80000001, 0x3}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)={0xff}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) open$dir(&(0x7f0000000340)='./bus/file0\x00', 0x105980, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x6) 00:34:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r1, &(0x7f0000000800)="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", 0x400) sendfile(r1, r2, 0x0, 0x10000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000580)={0x0, {{0xa, 0x4e24, 0x0, @remote, 0x2}}, {{0xa, 0x4e21, 0x2, @empty, 0x61}}}, 0x108) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000003c0)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setstatus(r3, 0x4, 0x44800) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = inotify_init() fcntl$notify(r5, 0x402, 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280), 0x1033b) fdatasync(r7) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r7}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) r9 = fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x81000202) r10 = syz_open_procfs(0x0, 0x0) lseek(r10, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:34:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x602800, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fchmod(r1, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r4, &(0x7f0000000800)="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", 0x400) sendfile(r4, r5, 0x0, 0x10000) linkat(r3, &(0x7f0000000600)='./file0\x00', r4, &(0x7f0000000640)='./file0\x00', 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r6, &(0x7f0000000800)="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", 0x400) sendfile(r6, r7, 0x0, 0x10000) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x154, r9, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x971c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91c}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5051}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="e4ff2839", @ANYRES16=r9, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x810}, 0x8004) [ 89.320536] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 00:34:19 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'nlmon0\x00', {0x2, 0x4e20, @local}}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x228600}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x138, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x118, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4372}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x1) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x406, r5) r7 = socket$inet(0x2, 0x801, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0xffffffffffffffb5, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x20) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x21}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x800, 0x4, @rand_addr="d03e406e139eae62c7801181f8d7ab2c", 0x2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x6004001) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000400)=@v1={0x0, @aes128, 0x0, "8062c77c21b48195"}) 00:34:19 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x178) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1e5042, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ftruncate(r2, 0x0) 00:34:19 executing program 5: open(0x0, 0x143042, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x0, 0xe, &(0x7f0000000340)='memory.events\x00', 0xffffffffffffffff}, 0x30) ptrace$setopts(0x4200, r2, 0x8, 0x11) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e20, @loopback}, {0x306, @random="2a469bc91828"}, 0x94, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'netdevsim0\x00'}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) recvmsg(r3, &(0x7f0000000540)={&(0x7f0000000280)=@alg, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000140)=""/29, 0x1d}], 0x3, &(0x7f0000000300)}, 0x10000) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 00:34:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x6, 0x5, 0x3, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 00:34:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000), 0x4) close(0xffffffffffffffff) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000c80)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4) r3 = dup2(r2, r2) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x7fa, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001100)="3975fd01c2b6d248bd3ddd1ef99e35c0e524dc8fa9", 0x15}], 0x1}, 0x30000001) r4 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r4, &(0x7f0000000800)="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", 0x400) sendfile(r4, r5, 0x0, 0x10000) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000080)) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f000031e000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) io_setup(0x1000, &(0x7f0000000240)=0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x40, 0x0) r8 = open(0x0, 0x0, 0x0) io_submit(r6, 0x3, &(0x7f0000000600)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x8, r7, &(0x7f0000000440)="5f68571aa59939db585d5490badc39dad510e5a3b0898cc6a385fe445ff9887de49c16fb247bdf3abfd7456f68f9b755360ee5fffd3447c27b0cd566cf963708ebcefdf006ea3ad456ca012b2586cd154a0a8160702ace297f1f2fb050adff6aec", 0x61, 0x1000}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f00000004c0)="f0104727d6a668efbe7ecc9a9c33093faab698396e60403a5d4b1e8cecb6775f554f7e14de1187893e31b1a00604218bb9c917d374fc9450b618bd58d0b43ead3104cf2757845bb30b97ffbd088394785923e9c66f7f5c60676a755aa2c82e7f2c0d9cd5e604", 0x66, 0x9, 0x0, 0x1, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x4, r8, &(0x7f0000000580)="d0e231d901ca52fa1c24b04dd84f194b06eafc69ae248781b1cd2ef623ec40", 0x1f, 0x80000001, 0x0, 0x1, r0}]) [ 89.670958] syz-executor.2 (3088) used greatest stack depth: 23368 bytes left 00:34:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) lsetxattr$security_ima(0x0, &(0x7f00000003c0)='security.ima\x00', 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r2 = accept(r1, &(0x7f00000000c0)=@vsock, &(0x7f0000000000)=0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) io_setup(0x4, &(0x7f0000000b00)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000300)=0x6) sendfile(r3, r4, 0x0, 0x666d) sendfile(r3, r4, 0x0, 0xa195) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000400)=""/194, 0xc2, 0xffffffffffffffff}}, 0x10) open(0x0, 0x0, 0x9) tgkill(0x0, 0x0, 0x12) clock_gettime(0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4, 0x3) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000001c0)="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") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setpriority(0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 00:34:19 executing program 1: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000800)=""/4096) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) lsetxattr(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f00000003c0)='tracefs\x00', 0x8, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000280)={0x80000001, 0xff, 0x3ff, 0x85, 0x3, "b8256757874abd670b951081502cd47b273018", 0x3, 0x94}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) 00:34:19 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8eb409b3cfa77f8e, 0x400002172, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000, 0x0, &(0x7f00005a9000/0x3000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/49) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) lstat(&(0x7f0000000440)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./bus\x00', 0x0, r1, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', &(0x7f0000000300)='ocfs2\x00', 0x2000, &(0x7f0000000340)='^\x00') io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:34:19 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0xeb, "0877cb85b908f64d91659d022395241793ba0f", 0xde73, 0x4}) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x8}, 0xffffffffffffffa1) alarm(0x63e4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2c, @empty}, 0xffffffffffffff45) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) recvfrom$inet(r0, &(0x7f0000000240)=""/216, 0xd8, 0x40, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/udplite6\x00') sendmsg$key(r1, 0x0, 0x0) pipe(&(0x7f0000000100)) 00:34:19 executing program 1: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000800)=""/4096) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) lsetxattr(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f00000003c0)='tracefs\x00', 0x8, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000280)={0x80000001, 0xff, 0x3ff, 0x85, 0x3, "b8256757874abd670b951081502cd47b273018", 0x3, 0x94}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) 00:34:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4000000}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000d606003f7e3f878945020f8fda7c000000000000290000e431000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) 00:34:20 executing program 3: sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x318}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0xa0240, 0x114) ioctl$RTC_IRQP_READ(r1, 0x8008700b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0x2}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) dup(0xffffffffffffffff) dup(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000004580)='/selinux/access\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001780)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000012) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r2) keyctl$setperm(0x5, r2, 0x1000) syz_open_procfs(0x0, 0x0) 00:34:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000400)='autogroup\x00') pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180d) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000300)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 00:34:20 executing program 3: sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x318}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0xa0240, 0x114) ioctl$RTC_IRQP_READ(r1, 0x8008700b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0x2}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) dup(0xffffffffffffffff) dup(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000004580)='/selinux/access\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001780)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000012) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r2) keyctl$setperm(0x5, r2, 0x1000) syz_open_procfs(0x0, 0x0) 00:34:20 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x2, 0x695a0c82b484cbc7) write$9p(r0, &(0x7f0000000800)="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", 0x400) sendfile(r0, r1, 0x0, 0x10000) getpeername$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$selinux_attr(r3, &(0x7f0000000080)='system_u:object_r:fsad]_exec_t:s0\x00', 0x22) r7 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r8 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r7, &(0x7f0000000800)="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", 0x400) sendfile(r7, r8, 0x0, 0x10000) ioctl$TIOCGSERIAL(r7, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/174}) write$P9_RREMOVE(r6, &(0x7f0000000180), 0xaac1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x3}) prctl$PR_SET_DUMPABLE(0x4, 0x6) 00:34:20 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setgid(r1) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000480)={'hwsim0\x00', 0x7e4}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 00:34:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000400)='autogroup\x00') pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180d) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000300)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 00:34:20 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="01000200aaaaaaaaaaaaaaaaaaaaaa0a12e56ef41e4fad071a81ef7599b329f46bf014f4a6eccdf5101da9ffa52531898bb60b87df89c662f2ff200e73dcc9f1e6414f37d944f56dd9ca4d7f0688003a89cb49be48a6f54de21d0bc5b312855f76f48d932c89818342d8129a7e81e8019e281a13cab74ff7c1b523b5ff5fe9aed05b4cd688326fe5da97b3d43190796301e2200df31919e478a05512e5049b4b2213ac73aa6b0712ec1a297288c4b389376d1163d65c7c73c919400af58fae02f2bedf882c1fd46d079fe0c299"]) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file1/file0\x00') 00:34:20 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff030000000055315800000000000400000000000000", @ANYBLOB="740081008ca31de4df3b54c91df8a31be46a014d43e66871c22ee208e70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38675a4005285bb01e4d5d627b9d0911da0beb35118732bb0cbf909651c8c6007bde031f3161edefb1678c06079744ce21b8e89e5300001f00ff6a4518c96e417975eb8dbfcd05c1f01e7517e5613ddfa80fa701acef1aff3ca2e20bb3670e0fa4267f594bb82ce33f5f917ddc39b440e22a738f2b63467e83eba5b6ff0d1d1abea82342d2397be05bf39bed6f9cdbbc3ab5a4c96c5c7121ce311f2d2ee99fb6371a206df8bc"], 0xb1}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x5, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r0, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d8", 0x400) sendfile(r0, r1, 0x0, 0x10000) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0)=0x2, 0x4) [ 90.521562] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 90.586880] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 00:34:20 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e26, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000500)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x1d) sendfile(r3, r4, 0x0, 0x8000fffffffe) openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.\x1dG\xbf\xea\xe0', 0x26e1, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r5, 0x0) r6 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000002c005fba00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x39, &(0x7f0000000780)=ANY=[@ANYBLOB="b400000000000080dd00000000000000000000000088583b00000095cd09c5ec7f39ceea0318cd6784537b2fcbc12aab5ccf01d38892a7ea3e6cd9a8c626924c51f677ab0d4ce01ca448a125cb0d784af8245501000000904467489711504f26d23d26c15f6e393e0fef07867550eeca609c479acf2d4904a614a0e85fba07bcf233d743ff48a1a330818c146ca4d42a4ea0396b59f1d54a9c05ad850ab08f0e0d6b976edb6ad09ee0f7af87f476dac0554c0abae51210f2becf4f2431f407b9e0a906b40a1c06ad68df56ec266f2e7ea4baeebff609fb4c63f599cc9cde1d1066aa0c5d3dfc76af20d7400e39fbc4ce44dbb4dab445b2c88b3a4e43377ff794058c76082759f4a8bee8f3c7c5f8e4adb0b728ed2f59eb977a25985bc0d493649e73de8f0d68a101430000000000000001557dd8689e0e222c99c18ad103f01597e87e7061c9e7ac7d3156452db5902f2481c642725846fc25f4275867918870eb9afe9cc8fd5a528ddfc22f6ffe3242c22280ddfc8b78ed7adac2e1ed0a492125ca8ee6af372d3b513c3a14fa17559ea1fd2d916b39efab120c7dd9b99f53fb20dbbaf3bcd98aed8097908601dde77cd88cb9beae543213a2eade2157ed2685801302a9ba2b8c4ea324776c57"], &(0x7f0000003ff6)='G\x00', 0x5, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x70) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r8 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) 00:34:20 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x200) lseek(r0, 0x0, 0x4) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000068c0), 0x400000000000062, 0x2000, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={r3, 0x9, 0x1000}, 0x0, &(0x7f0000000280)="cb6761f4cca9e1df40", &(0x7f00000002c0)=""/4096) r4 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', r3) r5 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="415f4e280d281745582eb9e5cb2cbefa066591ec711aee4ca21ff5270f0d9019cf8e286bdb4ab7ca06995af0611a280a62c13fc18894a016ec9d9903e1db3d6961c083bdadae93b76cd08e0dfd77bc88c0393007e9e53a5b442680bb8dbe13374956cf27309a5fc7dd9e0c3085a97540c1326c553b07da80e90470d07a97647c50491ee72118", 0x86, 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000500)=[{&(0x7f00000002c0)="6b9aea7c362f6cf33475beb5a5398e3db1e5789ba55dc4aebdd22bdfef3c0b66b1cb0ce6e58a9ff402c3415132a8f84ee3d6709d890be707313c9a2943028e2ecba8e47cb23de789553be00ef7b4c8838003171d3e29d699d849a23d9fe6167b91b99c80c1249ad31f7c55ec28", 0x6d}, {&(0x7f0000000340)="abc67c248935a52ce1ee288a1d5d1f765a0a25663389642988a168e0860e3d153f77a7d1cb5f459660526b57d6d30ed978de8977a3a4e6a176e5d70f9884722fe245d965b33a5b03e780f50ba3258d4ed4ad581272f3e399b243e1ee0374ff18b1420ce189e3308d18bd8695a9c269", 0x6f}, {&(0x7f00000003c0)="a8745bdd3228b95158c415ff147dd82c403358ea18aaa2a9b0b808365fc902c1c22fae8174d016828279a6989075f15349b373a005", 0x35}, {&(0x7f0000000400)="07d38c3465d5e7e9a93ac1051af5d1b9722664bdb8403194f53f2b6ca34b5b5c571cc5e4bb8c0f9b9c4ff90e98f1046ac5f27cdcea353db3632f5bea6a9672d0033bb2848186dc9f627dbc3b469da49aa72871e99753db3a332f20b4c9467603b7176d1f2ff433cee5dcd5e01ad74b0776924dbf8effbfd4844a2cea17f27a72ac7c1ded992dcf1b74688be649d2dedd5d6a9e7aac1260ee439bb166d25b055ab85fbcebb082ae75e29a3c671739659ace9da0b972e70c96454e826a191026c9bfa93bf694bcec8c58800c158648282873d62597f7e65b", 0xd7}], 0x4, r5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = socket$inet(0x2, 0x3, 0x84) bind$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_misc(r9, &(0x7f0000000240)={'syz0', "e539495730f2212406"}, 0xd) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x30) 00:34:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet6(0xa, 0x800, 0x9) sendto$inet6(r3, &(0x7f00000000c0)="d61279e8437ac69838d64de85984eb6c0207467bb274df26f320fb719bcf18943602e0ca8692b2864abf094d28e6302da1c94a31db9d92ee4740", 0x3a, 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x11, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 00:34:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x73) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f00000002c0)='security.SMACK64\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r0, &(0x7f0000000800)="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", 0x400) sendfile(r0, r1, 0x0, 0x10000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r2, &(0x7f0000000800)="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", 0x400) sendfile(r2, r3, 0x0, 0x10000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r4, &(0x7f0000000800)="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", 0x400) sendfile(r4, r5, 0x0, 0x10000) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001580)=0xfffffffffffffffe, 0xd7c1b1bd3b097d2b) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f00000014c0)={{0x1, @empty, 0x4e21, 0x0, 'wrr\x00', 0x2, 0xfffffffa, 0x7}, {@remote, 0x4e23, 0x1, 0x10001, 0x10000, 0x2}}, 0x44) r8 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={r8, 0x9, 0x1000}, 0x0, &(0x7f0000000280)="cb6761f4cca9e1df40", &(0x7f00000002c0)=""/4096) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={r8, 0x9, 0x1000}, 0x0, &(0x7f0000000280)="cb6761f4cca9e1df40", &(0x7f00000002c0)=""/4096) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r6, 0xdc, 0x1000}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d637279707464287368613232342d617678322900000000000000000000000000000000000000000000000000000000000000000000000000db000000000000"], &(0x7f00000003c0)="38a86a7af78d1d10c47e539d97ef958cca5bdb7f16f3ed38bc5d8d13379818e6866b1697769458e6a9318413eb8363d70efea70bd6000b2d26058a68167894e1c62a391269da3bcf9883d88482b11d9e300a9700ac37fa761c68005b0cab8331b58fecedb1a46f31248ac95bdb4df7215975523db9ee3d4c86a4a3a3fd1a78826f37bb43b8a4908997744d20bdd000866763e800293cc315d964b2ae5f5a09c8e4e16f980364f1ed27ba60d6e1aa8741928d12502e4fff7ab56bae489f4969406d986778e801c60662210b1564f96d1636b2dea99022ce03fc70b89c", &(0x7f00000004c0)=""/4096) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x21) syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/ipc\x00') r10 = socket(0x10, 0x802, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write(r10, &(0x7f0000000100)="fc0000001c000705ab092506090007000aab08000600000002002593210001c000000000000e00000000b6db29e99815fa2c1e75c28656aaa79bb9d95662070000bc000c00f0036c6c256f1a272fdf0d110600d633d6406a007a01007a8934d07302ade01720d3d5bbc91a3e2e80772c05defc83ab82f605f70cec18444eb29d20f3d92c834fdc5bba4a46143ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dffff8407372e883661f545304dc30083df150cb2880f7f0000000000b4d57155870258a1000052c52d00000000000080000041f0d48f6f0000180548deac270e33429fd31101350000000000", 0xfc) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @multicast2}, {0x1, @dev}, 0x0, {0x2, 0x4e20, @empty}, 'yam0\x00'}) 00:34:20 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r3, &(0x7f0000000800)="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", 0x400) sendfile(r3, r4, 0x0, 0x10000) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000000)) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) fsync(r5) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="faaa4c356f828c7a8564de7c8686a0af6962625b13e705000000000000fd932fbdfbb9b134e39345812326824a4dc4e0420314295afed1ed6470fac045fedd2fd7078507304025c73daee7f966bd2a8f09766b8870f2b707a61e924288b8fd9d65ae18ece92e40aa999d88cd8741472966f3000000000000000000"], 0x7b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 00:34:20 executing program 1: mlockall(0x2) perf_event_open(&(0x7f0000001900)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9450a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000140)="d3220000000000000000000000cb5ba056") [ 90.912196] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.977761] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x73) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f00000002c0)='security.SMACK64\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r0, &(0x7f0000000800)="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", 0x400) sendfile(r0, r1, 0x0, 0x10000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r2, &(0x7f0000000800)="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", 0x400) sendfile(r2, r3, 0x0, 0x10000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r4, &(0x7f0000000800)="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", 0x400) sendfile(r4, r5, 0x0, 0x10000) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001580)=0xfffffffffffffffe, 0xd7c1b1bd3b097d2b) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f00000014c0)={{0x1, @empty, 0x4e21, 0x0, 'wrr\x00', 0x2, 0xfffffffa, 0x7}, {@remote, 0x4e23, 0x1, 0x10001, 0x10000, 0x2}}, 0x44) r8 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={r8, 0x9, 0x1000}, 0x0, &(0x7f0000000280)="cb6761f4cca9e1df40", &(0x7f00000002c0)=""/4096) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={r8, 0x9, 0x1000}, 0x0, &(0x7f0000000280)="cb6761f4cca9e1df40", &(0x7f00000002c0)=""/4096) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r6, 0xdc, 0x1000}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d637279707464287368613232342d617678322900000000000000000000000000000000000000000000000000000000000000000000000000db000000000000"], &(0x7f00000003c0)="38a86a7af78d1d10c47e539d97ef958cca5bdb7f16f3ed38bc5d8d13379818e6866b1697769458e6a9318413eb8363d70efea70bd6000b2d26058a68167894e1c62a391269da3bcf9883d88482b11d9e300a9700ac37fa761c68005b0cab8331b58fecedb1a46f31248ac95bdb4df7215975523db9ee3d4c86a4a3a3fd1a78826f37bb43b8a4908997744d20bdd000866763e800293cc315d964b2ae5f5a09c8e4e16f980364f1ed27ba60d6e1aa8741928d12502e4fff7ab56bae489f4969406d986778e801c60662210b1564f96d1636b2dea99022ce03fc70b89c", &(0x7f00000004c0)=""/4096) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x21) syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/ipc\x00') r10 = socket(0x10, 0x802, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write(r10, &(0x7f0000000100)="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", 0xfc) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @multicast2}, {0x1, @dev}, 0x0, {0x2, 0x4e20, @empty}, 'yam0\x00'}) [ 91.033225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:21 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="f80000001800272f000000000000000000000000000000000000000000000000e000000100"/53, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}}, 0x4804) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80000001, 0x0) socket(0x10, 0x2, 0x0) setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="fc00000048000701ac092500090007000aab0800080000000000e293e00001c0000000000000000000000000090000f547472b4911ea50a79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c025387e6e158a1ad0a4f41f0d48f6f0000080548dea6600e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c227b13b1dfe2074d7940000000000", 0xf9) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000200)="fc00000048000701ac092500090007000aab0800080000000000e293e00001c0000000000000000000000000090000f547472b4911ea50a79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c025387e6e158a1ad0a4f41f0d48f6f0000080548dea6600e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c227b13b1dfe2074d7940000", 0xf6) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x370, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="7400cd75711b3e01d01800272f00000000007a209b5d4a9b0ef90000000000000000000001075bfe1196837901e72c0cd15d005a162a838ffff55d127e412185ff7d2bdf22b0a7d8f5f90f6f9c6ac82e00b2a6bda2a8a326d7d29e042bee61eca40bc1261300e8115a1503f71386c9bbf0fc941059a7e933542ceba50050fe19f005146cd2f01de64a1becf7a0f3b72c9cdbfafd81a42d8264008a10243ee2f772dba04363fbca5304e89e19a5eea2f6245097569a19110000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000480)=ANY=[], @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYRESDEC=r11, @ANYBLOB="0b2b2ef201573015e59278adef469f4837414257335edaef0c3fb6", @ANYPTR, @ANYRES16]], @ANYBLOB="0cf3931f45bc5cf87ca5e010bcb2ddc87f4951908446b51dcc996cd8bc0a474a0d76d8b159c1a2240314e1b5ba1d25d666352796c64dbf87bb05be2b13aab459092c52e67611ed353de4f3c50bf4f81e953708846603512928ea9b1d40adba58a53acba51d", @ANYRES32=r8, @ANYRES32=r12], 0xa}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300000f0000000000000000000000f500180000000000050a0600000000000a00000000ecffffffffffffff000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb00000000000000005715da8aa7d8b795bda0daf376"], 0x81}}, 0x0) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 91.111471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.142998] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.236186] devpts: called with bogus options 00:34:21 executing program 0: set_tid_address(&(0x7f0000000140)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4043, 0xcd) r2 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r1, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d8", 0x400) sendfile(r1, r2, 0x0, 0x10000) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x3, {0x9}}, 0x18) 00:34:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000001340)='/dev/loop#\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0) r1 = inotify_init() r2 = syz_open_dev$loop(&(0x7f0000001340)='/dev/loop#\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x10}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x15, 0x5, 0x401, 0x1, 0x0, 0xffffffffffffffff, 0x5, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/context\x00', 0x2, 0x0) poll(&(0x7f0000000400)=[{r0, 0x484}, {r1, 0x600}, {r2, 0x180}, {r3, 0x400}, {r4, 0x2}], 0x5, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) r5 = getpgid(0xffffffffffffffff) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x64, &(0x7f00000001c0), &(0x7f0000000440)=0x4) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x27) pipe(&(0x7f0000000040)) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) get_robust_list(r5, &(0x7f0000000300)=&(0x7f0000000200)={&(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000340)=0x18) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x2}) syz_open_dev$binderN(0x0, 0x0, 0x0) 00:34:21 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r3, &(0x7f0000000800)="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", 0x400) sendfile(r3, r4, 0x0, 0x10000) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000000)) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) fsync(r5) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="faaa4c356f828c7a8564de7c8686a0af6962625b13e705000000000000fd932fbdfbb9b134e39345812326824a4dc4e0420314295afed1ed6470fac045fedd2fd7078507304025c73daee7f966bd2a8f09766b8870f2b707a61e924288b8fd9d65ae18ece92e40aa999d88cd8741472966f3000000000000000000"], 0x7b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 00:34:21 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) getsockname$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r3, &(0x7f0000000c00)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d8", 0xfffffffffffffcb3) sendfile(r3, r4, 0x0, 0x10000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r3, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x10000, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x1, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x1, 0x10, 0x400, 0x200}, &(0x7f0000000300)=0x688, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x81}}, 0x10) sendto(r2, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x41, &(0x7f0000000000)=0x2, 0xffffffffffffff8f) r5 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r5, &(0x7f0000000800)="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", 0x400) sendfile(r5, r6, 0x0, 0x10000) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x1, 0x2, 0x3, 0x2}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000000000000a0100000100000010000000000000000001000002000000500000000000000076010000b053720cc48525205afb406d90de7620a8c213696aef6d768238e6c24f36711c8dbaadabc4c179de8d9c1e7c6537d1a8df1a198568c94589c9cd7256ce9db80000000000"], 0x70}}], 0x1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000480)=0x81) 00:34:21 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x250ce47f) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x14, &(0x7f0000000000)={0xfffffffe, 0x7f}) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ff2120633a2e2f66"], 0x8) [ 91.897623] ================================================================== [ 91.905135] BUG: KASAN: use-after-free in disk_unblock_events+0x55/0x60 [ 91.911899] Read of size 8 at addr ffff88019cc0fc60 by task syz-executor.4/3291 [ 91.919340] [ 91.920978] CPU: 1 PID: 3291 Comm: syz-executor.4 Not tainted 4.9.194+ #0 [ 91.927907] ffff88019cf8f730 ffffffff81b67001 0000000000000000 ffffea0006730200 [ 91.935982] ffff88019cc0fc60 0000000000000008 ffffffff81b3b4b5 ffff88019cf8f768 [ 91.944049] ffffffff8150c4f1 0000000000000000 ffff88019cc0fc60 ffff88019cc0fc60 [ 91.952107] Call Trace: [ 91.954696] [<0000000049248337>] dump_stack+0xc1/0x120 [ 91.960059] [<0000000084c68377>] ? disk_unblock_events+0x55/0x60 [ 91.966300] [<0000000096aa77c6>] print_address_description+0x6f/0x23a [ 91.974799] [<0000000084c68377>] ? disk_unblock_events+0x55/0x60 [ 91.981047] [<0000000066f4f4ac>] kasan_report.cold+0x8c/0x2ba [ 91.987823] [<00000000ccc2c632>] __asan_report_load8_noabort+0x14/0x20 [ 91.994586] [<0000000084c68377>] disk_unblock_events+0x55/0x60 [ 92.000735] [<000000001730de71>] __blkdev_get+0x6ba/0xeb0 [ 92.006499] [<000000004c18fa40>] ? __blkdev_put+0x840/0x840 [ 92.012355] [<00000000afb358ee>] ? retint_kernel+0x2d/0x2d [ 92.018075] [<00000000cb390893>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 92.025101] [<0000000047a01971>] blkdev_get+0x2e8/0x920 [ 92.030575] [<0000000050e974ef>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 92.037334] [<00000000afb358ee>] ? retint_kernel+0x2d/0x2d [ 92.043046] [<00000000194c5ff1>] ? bd_may_claim+0xd0/0xd0 [ 92.048692] [<0000000024f6f8cf>] ? bd_acquire+0x88/0x250 [ 92.054410] [<00000000592102fd>] ? _raw_spin_unlock+0x2d/0x50 [ 92.060470] [<00000000946fbbcc>] blkdev_open+0x1aa/0x250 [ 92.066020] [<0000000037fd6f0c>] do_dentry_open+0x422/0xd20 [ 92.071842] [<000000001ee73b3f>] ? blkdev_get_by_dev+0x80/0x80 [ 92.077918] [<00000000cd758986>] vfs_open+0x105/0x230 [ 92.083207] [<00000000a1d2b603>] ? may_open.isra.0+0x139/0x290 [ 92.089275] [<00000000330adc64>] path_openat+0xbf5/0x2f60 00:34:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1020808, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000004c0)=""/239, 0xef}], 0x4, 0x0) 00:34:22 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/194, 0xc2}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/211, 0xd3}, {&(0x7f00000025c0)=""/253, 0xfd}, {&(0x7f00000026c0)=""/142, 0x8e}], 0x6, 0x800) r0 = gettid() r1 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r1, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d8", 0x400) sendfile(r1, r2, 0x0, 0x10000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002780)={0x0, 0x0}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r3) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r5, 0x2081fd) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x10, 0x80002, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x4003fa) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x9e}) creat(&(0x7f0000000380)='./bus\x00', 0x0) r12 = gettid() ptrace$setopts(0x4206, r12, 0x0, 0x0) tkill(r12, 0x21) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r14 = syz_open_procfs(r13, &(0x7f0000000100)='map_files\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup3(r15, r16, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) read$FUSE(r14, 0x0, 0x1ac) [ 92.095172] [<00000000af0b9267>] ? path_mountpoint+0x6d0/0x6d0 [ 92.101252] [<000000008d1bba0a>] ? __schedule+0x6d6/0x1f10 [ 92.106976] [<00000000b6c3c2c8>] do_filp_open+0x1a1/0x280 [ 92.112613] [<0000000075afccb8>] ? may_open_dev+0xe0/0xe0 [ 92.118269] [<0000000058b94720>] ? ___preempt_schedule+0x16/0x18 [ 92.124862] [<000000005c10e52b>] ? _raw_spin_unlock+0x41/0x50 [ 92.130842] [<00000000cb98b058>] ? __alloc_fd+0x1d4/0x490 [ 92.136489] [<000000005f440058>] do_sys_open+0x2f0/0x610 [ 92.142029] [<000000003cf3a783>] ? filp_open+0x70/0x70 [ 92.147396] [<00000000a71e49b4>] ? __might_fault+0x18e/0x1d0 [ 92.153272] [<000000005d47539e>] ? __might_fault+0xe4/0x1d0 [ 92.159337] [<000000002cecbf8f>] ? SyS_clock_gettime+0x118/0x1f0 [ 92.165561] [<00000000d7c23177>] ? SyS_clock_settime+0x230/0x230 [ 92.171780] [<000000000c52c396>] SyS_open+0x2d/0x40 [ 92.176867] [<00000000cf6afb03>] ? do_sys_open+0x610/0x610 [ 92.182566] [<00000000a19e5c35>] do_syscall_64+0x1ad/0x5c0 [ 92.188547] [<000000002f856bf1>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 92.195897] [ 92.197518] Allocated by task 3278: [ 92.202111] save_stack_trace+0x16/0x20 [ 92.206077] kasan_kmalloc.part.0+0x62/0xf0 [ 92.210385] kasan_kmalloc+0xb7/0xd0 [ 92.214879] kmem_cache_alloc_trace+0x115/0x2d0 [ 92.219629] alloc_disk_node+0x50/0x3c0 [ 92.223602] alloc_disk+0x1b/0x20 [ 92.227043] loop_add+0x37e/0x7d0 [ 92.230572] loop_control_ioctl+0x138/0x320 [ 92.235031] do_vfs_ioctl+0xb87/0x11d0 [ 92.239050] SyS_ioctl+0x8f/0xc0 [ 92.242423] do_syscall_64+0x1ad/0x5c0 00:34:22 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="f80000001800272f000000000000000000000000000000000000000000000000e000000100"/53, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}}, 0x4804) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80000001, 0x0) socket(0x10, 0x2, 0x0) setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="fc00000048000701ac092500090007000aab0800080000000000e293e00001c0000000000000000000000000090000f547472b4911ea50a79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c025387e6e158a1ad0a4f41f0d48f6f0000080548dea6600e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c227b13b1dfe2074d7940000000000", 0xf9) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000200)="fc00000048000701ac092500090007000aab0800080000000000e293e00001c0000000000000000000000000090000f547472b4911ea50a79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c025387e6e158a1ad0a4f41f0d48f6f0000080548dea6600e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c227b13b1dfe2074d7940000", 0xf6) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x370, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="7400cd75711b3e01d01800272f00000000007a209b5d4a9b0ef90000000000000000000001075bfe1196837901e72c0cd15d005a162a838ffff55d127e412185ff7d2bdf22b0a7d8f5f90f6f9c6ac82e00b2a6bda2a8a326d7d29e042bee61eca40bc1261300e8115a1503f71386c9bbf0fc941059a7e933542ceba50050fe19f005146cd2f01de64a1becf7a0f3b72c9cdbfafd81a42d8264008a10243ee2f772dba04363fbca5304e89e19a5eea2f6245097569a19110000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000480)=ANY=[], @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYRESDEC=r11, @ANYBLOB="0b2b2ef201573015e59278adef469f4837414257335edaef0c3fb6", @ANYPTR, @ANYRES16]], @ANYBLOB="0cf3931f45bc5cf87ca5e010bcb2ddc87f4951908446b51dcc996cd8bc0a474a0d76d8b159c1a2240314e1b5ba1d25d666352796c64dbf87bb05be2b13aab459092c52e67611ed353de4f3c50bf4f81e953708846603512928ea9b1d40adba58a53acba51d", @ANYRES32=r8, @ANYRES32=r12], 0xa}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300000f0000000000000000000000f500180000000000050a0600000000000a00000000ecffffffffffffff000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb00000000000000005715da8aa7d8b795bda0daf376"], 0x81}}, 0x0) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 92.246323] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 00:34:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0x4}}}]}, 0x30}}, 0x0) 00:34:22 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="f80000001800272f000000000000000000000000000000000000000000000000e000000100"/53, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}}, 0x4804) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80000001, 0x0) socket(0x10, 0x2, 0x0) setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="fc00000048000701ac092500090007000aab0800080000000000e293e00001c0000000000000000000000000090000f547472b4911ea50a79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c025387e6e158a1ad0a4f41f0d48f6f0000080548dea6600e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c227b13b1dfe2074d7940000000000", 0xf9) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000200)="fc00000048000701ac092500090007000aab0800080000000000e293e00001c0000000000000000000000000090000f547472b4911ea50a79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c025387e6e158a1ad0a4f41f0d48f6f0000080548dea6600e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c227b13b1dfe2074d7940000", 0xf6) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x370, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="7400cd75711b3e01d01800272f00000000007a209b5d4a9b0ef90000000000000000000001075bfe1196837901e72c0cd15d005a162a838ffff55d127e412185ff7d2bdf22b0a7d8f5f90f6f9c6ac82e00b2a6bda2a8a326d7d29e042bee61eca40bc1261300e8115a1503f71386c9bbf0fc941059a7e933542ceba50050fe19f005146cd2f01de64a1becf7a0f3b72c9cdbfafd81a42d8264008a10243ee2f772dba04363fbca5304e89e19a5eea2f6245097569a19110000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000480)=ANY=[], @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYRESDEC=r11, @ANYBLOB="0b2b2ef201573015e59278adef469f4837414257335edaef0c3fb6", @ANYPTR, @ANYRES16]], @ANYBLOB="0cf3931f45bc5cf87ca5e010bcb2ddc87f4951908446b51dcc996cd8bc0a474a0d76d8b159c1a2240314e1b5ba1d25d666352796c64dbf87bb05be2b13aab459092c52e67611ed353de4f3c50bf4f81e953708846603512928ea9b1d40adba58a53acba51d", @ANYRES32=r8, @ANYRES32=r12], 0xa}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300000f0000000000000000000000f500180000000000050a0600000000000a00000000ecffffffffffffff000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb00000000000000005715da8aa7d8b795bda0daf376"], 0x81}}, 0x0) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 00:34:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x81}]}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) splice(r1, 0x0, r3, 0x0, 0x30003, 0x0) 00:34:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) fchdir(r1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x11, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000600)=0x209, 0xfffffffffffffdae) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r5, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d8", 0x400) sendfile(r5, r6, 0x0, 0x10000) r7 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r8 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffff7fffd) write$9p(r7, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d8", 0x400) sendfile(r7, r8, 0x0, 0x10000) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000200)=0x6, 0xfffffffffffffeec) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000300)={0x0, 0x0}, 0x10) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x308) shutdown(r4, 0x0) pipe(&(0x7f0000000400)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x408000000000004, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)) r9 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x323) mlockall(0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000040)) r11 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r11, 0x1, 0x39, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r9, &(0x7f0000000540)={0xffffffffffffffc0, 0x0, 0x1}, 0x18) r12 = socket(0x10, 0x80002, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x34, 0x0, @thr={&(0x7f0000000640)="601d1e17eb296e55f0ec6d9277c5c6654ed7a8ee981313fec5693e3690775664bf63427aca99c38daa1d9dc465d3d4898030a2fe009556a5dd1685a2121e22a84d398c76b6d986168275a78b26ba017393fbb24dcd8a1724c197a528ede6774d33c9a95271aa4c1d35f1436b877397508b1ed8ae099d9d2e59f233fda89e2c45d54607dd66b7858a8796ca6cb47ed35a214fe5658b8920433a1403a74c4b3520883786632d15fe06e841dec5283f8a1a26a0", &(0x7f0000000300)="5dd1fe141a30375709aa184e1f1d"}}, &(0x7f00000003c0)) bind$netlink(r12, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) connect$netlink(r12, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) write(r12, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(0x0) connect$netlink(r12, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(r12, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) sendfile(r9, r11, &(0x7f0000000140), 0x8fff) [ 92.246326] [ 92.246329] Freed by task 3291: [ 92.246344] save_stack_trace+0x16/0x20 00:34:22 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="f80000001800272f000000000000000000000000000000000000000000000000e000000100"/53, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000102b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff0000000000000092be00000000000000000000000000000000000000000000000000000000000000000000000000000000b66c923d36402405370cc9af1158f637a5020a06cc7424a10a7435a1cf386210bee726930fb0d0ef8bc32d4583763bfb155b8a5b696702f7b24cf449882688b468cd0af5b46b58bf7afdd0aabe18f8616e4cd7dc56c00dae3eb999b52d10d564"], 0x4}}, 0x4804) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80000001, 0x0) socket(0x10, 0x2, 0x0) setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="fc00000048000701ac092500090007000aab0800080000000000e293e00001c0000000000000000000000000090000f547472b4911ea50a79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c025387e6e158a1ad0a4f41f0d48f6f0000080548dea6600e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c227b13b1dfe2074d7940000000000", 0xf9) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000200)="fc00000048000701ac092500090007000aab0800080000000000e293e00001c0000000000000000000000000090000f547472b4911ea50a79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c025387e6e158a1ad0a4f41f0d48f6f0000080548dea6600e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c227b13b1dfe2074d7940000", 0xf6) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x370, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="7400cd75711b3e01d01800272f00000000007a209b5d4a9b0ef90000000000000000000001075bfe1196837901e72c0cd15d005a162a838ffff55d127e412185ff7d2bdf22b0a7d8f5f90f6f9c6ac82e00b2a6bda2a8a326d7d29e042bee61eca40bc1261300e8115a1503f71386c9bbf0fc941059a7e933542ceba50050fe19f005146cd2f01de64a1becf7a0f3b72c9cdbfafd81a42d8264008a10243ee2f772dba04363fbca5304e89e19a5eea2f6245097569a19110000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000480)=ANY=[], @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYRESDEC=r11, @ANYBLOB="0b2b2ef201573015e59278adef469f4837414257335edaef0c3fb6", @ANYPTR, @ANYRES16]], @ANYBLOB="0cf3931f45bc5cf87ca5e010bcb2ddc87f4951908446b51dcc996cd8bc0a474a0d76d8b159c1a2240314e1b5ba1d25d666352796c64dbf87bb05be2b13aab459092c52e67611ed353de4f3c50bf4f81e953708846603512928ea9b1d40adba58a53acba51d", @ANYRES32=r8, @ANYRES32=r12], 0xa}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300000f0000000000000000000000f500180000000000050a0600000000000a00000000ecffffffffffffff000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb00000000000000005715da8aa7d8b795bda0daf376"], 0x81}}, 0x0) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 92.246352] kasan_slab_free+0xb0/0x190 [ 92.246356] kfree+0xfc/0x310 [ 92.246365] disk_release+0x255/0x330 [ 92.246373] device_release+0x7d/0x220 [ 92.246380] kobject_put+0x150/0x260 [ 92.246385] put_disk+0x23/0x30 [ 92.246394] __blkdev_get+0x61a/0xeb0 [ 92.246399] blkdev_get+0x2e8/0x920 [ 92.246404] blkdev_open+0x1aa/0x250 [ 92.246413] do_dentry_open+0x422/0xd20 [ 92.246418] vfs_open+0x105/0x230 [ 92.246427] path_openat+0xbf5/0x2f60 [ 92.246433] do_filp_open+0x1a1/0x280 [ 92.246439] do_sys_open+0x2f0/0x610 [ 92.246444] SyS_open+0x2d/0x40 [ 92.246450] do_syscall_64+0x1ad/0x5c0 [ 92.246456] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 92.246458] [ 92.246464] The buggy address belongs to the object at ffff88019cc0f700 [ 92.246464] which belongs to the cache kmalloc-2048 of size 2048 [ 92.246470] The buggy address is located 1376 bytes inside of [ 92.246470] 2048-byte region [ffff88019cc0f700, ffff88019cc0ff00) [ 92.246472] The buggy address belongs to the page: [ 92.246484] page:ffffea0006730200 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 92.246489] flags: 0x4000000000010200(slab|head) [ 92.246491] page dumped because: kasan: bad access detected [ 92.246492] [ 92.246495] Memory state around the buggy address: [ 92.246502] ffff88019cc0fb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.246507] ffff88019cc0fb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.246512] >ffff88019cc0fc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.246515] ^ [ 92.246520] ffff88019cc0fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.246525] ffff88019cc0fd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.246527] ================================================================== [ 92.246530] Disabling lock debugging due to kernel taint [ 92.307775] devpts: called with bogus options [ 92.346453] devpts: called with bogus options [ 92.371655] devpts: called with bogus options [ 92.411510] Kernel panic - not syncing: panic_on_warn set ... [ 92.411510] [ 92.411521] CPU: 1 PID: 3291 Comm: syz-executor.4 Tainted: G B 4.9.194+ #0 [ 92.411536] ffff88019cf8f670 ffffffff81b67001 ffff88019cf8f700 ffffffff82e40f17 [ 92.411546] 00000000ffffffff 0000000000000001 ffffffff81b3b4b5 ffff88019cf8f750 [ 92.411555] ffffffff813fef3a 0000000041b58ab3 ffffffff82e32f55 ffffffff813fed61 [ 92.411557] Call Trace: [ 92.411575] [<0000000049248337>] dump_stack+0xc1/0x120 [ 92.411586] [<0000000084c68377>] ? disk_unblock_events+0x55/0x60 [ 92.411596] [<0000000016e17dda>] panic+0x1d9/0x3bd [ 92.411603] [<00000000d4e8ade6>] ? add_taint.cold+0x16/0x16 [ 92.411615] [<00000000c51efbd0>] ? preempt_schedule_common+0x4f/0xe0 [ 92.411623] [<0000000084c68377>] ? disk_unblock_events+0x55/0x60 [ 92.411630] [<00000000d2a6499b>] ? preempt_schedule+0x26/0x30 [ 92.411640] [<0000000058b94720>] ? ___preempt_schedule+0x16/0x18 [ 92.411650] [<00000000bd01e657>] kasan_end_report+0x47/0x4f [ 92.411658] [<00000000a8922a36>] kasan_report.cold+0xa9/0x2ba [ 92.411666] [<00000000ccc2c632>] __asan_report_load8_noabort+0x14/0x20 [ 92.411673] [<0000000084c68377>] disk_unblock_events+0x55/0x60 [ 92.411682] [<000000001730de71>] __blkdev_get+0x6ba/0xeb0 [ 92.411689] [<000000004c18fa40>] ? __blkdev_put+0x840/0x840 [ 92.411696] [<00000000afb358ee>] ? retint_kernel+0x2d/0x2d [ 92.411705] [<00000000cb390893>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 92.411711] [<0000000047a01971>] blkdev_get+0x2e8/0x920 [ 92.411719] [<0000000050e974ef>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 92.411726] [<00000000afb358ee>] ? retint_kernel+0x2d/0x2d [ 92.411733] [<00000000194c5ff1>] ? bd_may_claim+0xd0/0xd0 [ 92.411739] [<0000000024f6f8cf>] ? bd_acquire+0x88/0x250 [ 92.411746] [<00000000592102fd>] ? _raw_spin_unlock+0x2d/0x50 [ 92.411753] [<00000000946fbbcc>] blkdev_open+0x1aa/0x250 [ 92.411761] [<0000000037fd6f0c>] do_dentry_open+0x422/0xd20 [ 92.411768] [<000000001ee73b3f>] ? blkdev_get_by_dev+0x80/0x80 [ 92.411775] [<00000000cd758986>] vfs_open+0x105/0x230 [ 92.411783] [<00000000a1d2b603>] ? may_open.isra.0+0x139/0x290 [ 92.411791] [<00000000330adc64>] path_openat+0xbf5/0x2f60 [ 92.411798] [<00000000af0b9267>] ? path_mountpoint+0x6d0/0x6d0 [ 92.411806] [<000000008d1bba0a>] ? __schedule+0x6d6/0x1f10 [ 92.411813] [<00000000b6c3c2c8>] do_filp_open+0x1a1/0x280 [ 92.411821] [<0000000075afccb8>] ? may_open_dev+0xe0/0xe0 [ 92.411836] [<0000000058b94720>] ? ___preempt_schedule+0x16/0x18 [ 92.411844] [<000000005c10e52b>] ? _raw_spin_unlock+0x41/0x50 [ 92.411854] [<00000000cb98b058>] ? __alloc_fd+0x1d4/0x490 [ 92.411861] [<000000005f440058>] do_sys_open+0x2f0/0x610 [ 92.411867] [<000000003cf3a783>] ? filp_open+0x70/0x70 [ 92.411876] [<00000000a71e49b4>] ? __might_fault+0x18e/0x1d0 [ 92.411883] [<000000005d47539e>] ? __might_fault+0xe4/0x1d0 [ 92.411894] [<000000002cecbf8f>] ? SyS_clock_gettime+0x118/0x1f0 [ 92.411901] [<00000000d7c23177>] ? SyS_clock_settime+0x230/0x230 [ 92.411908] [<000000000c52c396>] SyS_open+0x2d/0x40 [ 92.411914] [<00000000cf6afb03>] ? do_sys_open+0x610/0x610 [ 92.411921] [<00000000a19e5c35>] do_syscall_64+0x1ad/0x5c0 [ 92.411929] [<000000002f856bf1>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 92.415214] Kernel Offset: disabled [ 92.878042] Rebooting in 86400 seconds..